Update seccomp policy to support crash dumps (c6eacf4a) · Commits · e / os / android_frameworks_av

services/mediacodec/seccomp_policy/mediaswcodec-arm64.policy

+18 −1

Original line number	Diff line number	Diff line
		@@ -28,7 +28,6 @@ newfstatat: 1
		fstatfs: 1
		memfd_create: 1
		ftruncate: 1
		ftruncate64: 1

		# mremap: Ensure \|flags\| are (MREMAP_MAYMOVE \| MREMAP_FIXED) TODO: Once minijail
		# parser support for '<' is in this needs to be modified to also prevent
		@@ -62,3 +61,21 @@ rt_sigreturn: 1
		getrandom: 1
		madvise: 1

		# crash dump policy additions
		clock_gettime: 1
		getpid: 1
		gettid: 1
		pipe2: 1
		recvmsg: 1
		process_vm_readv: 1
		tgkill: 1
		rt_sigaction: 1
		rt_tgsigqueueinfo: 1
		#mprotect: arg2 in 0x1\|0x2
		munmap: 1
		#mmap: arg2 in 0x1\|0x2
		geteuid: 1
		getgid: 1
		getegid: 1
		getgroups: 1