Merge "Add riscv64 seccomp policy for codec2"

        arm64: {

            src: "seccomp_policy/android.hardware.media.c2@1.2-default-arm64.policy",

        },

        riscv64: {

            src: "seccomp_policy/android.hardware.media.c2@1.2-default-riscv64.policy",

        },

        x86: {

            src: "seccomp_policy/android.hardware.media.c2@1.2-default-x86.policy",

        },

    // This may be removed.

    required: ["crash_dump.policy"],

}

# Copyright (C) 2019 The Android Open Source Project

#

# Licensed under the Apache License, Version 2.0 (the "License");

# you may not use this file except in compliance with the License.

# You may obtain a copy of the License at

#

#      http://www.apache.org/licenses/LICENSE-2.0

#

# Unless required by applicable law or agreed to in writing, software

# distributed under the License is distributed on an "AS IS" BASIS,

# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

# See the License for the specific language governing permissions and

# limitations under the License.

futex: 1

# ioctl calls are filtered via the selinux policy.

ioctl: 1

sched_yield: 1

close: 1

dup: 1

ppoll: 1

mprotect: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE

mmap: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE

getuid: 1

getrlimit: 1

fstat: 1

newfstatat: 1

fstatfs: 1

memfd_create: 1

ftruncate: 1

mremap: arg3 == 3 || arg3 == MREMAP_MAYMOVE

munmap: 1

prctl: 1

writev: 1

sigaltstack: 1

clone: 1

exit: 1

lseek: 1

rt_sigprocmask: 1

openat: 1

write: 1

nanosleep: 1

setpriority: 1

set_tid_address: 1

getdents64: 1

readlinkat: 1

read: 1

pread64: 1

gettimeofday: 1

faccessat: 1

exit_group: 1

restart_syscall: 1

rt_sigreturn: 1

getrandom: 1

madvise: 1

# crash dump policy additions

clock_gettime: 1

getpid: 1

gettid: 1

pipe2: 1

recvmsg: 1

process_vm_readv: 1

tgkill: 1

rt_sigaction: 1

rt_tgsigqueueinfo: 1

#mprotect: arg2 in 0x1|0x2

munmap: 1

#mmap: arg2 in 0x1|0x2

geteuid: 1

getgid: 1

getegid: 1

getgroups: 1