Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 7de66a0e authored by Joel Fernandes's avatar Joel Fernandes Committed by Android (Google) Code Review
Browse files

Merge "Add memfd related syscalls to allowed list"

parents a3e4fe3f d648399d

services/mediacodec/seccomp_policy/mediacodec-arm.policy

+2 −0
Original line number Diff line number Diff line
@@ -13,6 +13,8 @@ dup: 1 
ppoll: 1

mmap2: 1

getrandom: 1

memfd_create: 1

ftruncate64: 1



# mremap: Ensure |flags| are (MREMAP_MAYMOVE | MREMAP_FIXED) TODO: Once minijail

# parser support for '<' is in this needs to be modified to also prevent

services/mediacodec/seccomp_policy/mediaswcodec-arm.policy

+2 −0
Original line number Diff line number Diff line
@@ -21,6 +21,8 @@ dup: 1 
ppoll: 1

mprotect: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE

mmap2: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE

memfd_create: 1

ftruncate64: 1



# mremap: Ensure |flags| are (MREMAP_MAYMOVE | MREMAP_FIXED) TODO: Once minijail

# parser support for '<' is in this needs to be modified to also prevent

services/mediacodec/seccomp_policy/mediaswcodec-arm64.policy

+2 −0
Original line number Diff line number Diff line
@@ -26,6 +26,8 @@ getrlimit: 1 
fstat: 1

newfstatat: 1

fstatfs: 1

memfd_create: 1

ftruncate64: 1



# mremap: Ensure |flags| are (MREMAP_MAYMOVE | MREMAP_FIXED) TODO: Once minijail

# parser support for '<' is in this needs to be modified to also prevent