Snap for 4821244 from 82f153c1 to pi-release

include $(BUILD_EXECUTABLE)

# service seccomp filter

ifeq ($(TARGET_ARCH), $(filter $(TARGET_ARCH), arm arm64 x86))

ifeq ($(TARGET_ARCH), $(filter $(TARGET_ARCH), arm arm64 x86 x86_64))

include $(CLEAR_VARS)

LOCAL_MODULE := mediaextractor.policy

LOCAL_MODULE_CLASS := ETC

# Organized by frequency of systemcall - in descending order for

# best performance.

ioctl: 1

futex: 1

prctl: 1

write: 1

getpriority: 1

close: 1

dup: 1

munmap: 1

mmap: 1

madvise: 1

openat: 1

clock_gettime: 1

writev: 1

brk: 1

mprotect: 1

read: 1

lseek: 1

clone: 1

getuid: 1

setpriority: 1

sigaltstack: 1

newfstatat: 1

restart_syscall: 1

exit: 1

exit_group: 1

rt_sigreturn: 1

faccessat: 1

sched_setscheduler: 1

getrlimit: 1

nanosleep: 1

# for FileSource

readlinkat: 1

# for attaching to debuggerd on process crash

tgkill: 1

socket: arg0 == 1

connect: 1

fcntl: 1

rt_sigprocmask: 1

rt_sigaction: 1

rt_tgsigqueueinfo: 1

geteuid: 1

getgid: 1

getegid: 1

getgroups: 1

getdents64: 1

pipe2: 1

ppoll: 1

# Required by AddressSanitizer

gettid: 1

sched_yield: 1

getpid: 1

gettid: 1