Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit c752095a authored by Melvin Xu (徐敏)'s avatar Melvin Xu (徐敏) Committed by android-build-merger
Browse files

Merge "CTS-on-gsi test,... 

Merge "CTS-on-gsi test, CtsSecurityHostTestCases--android.security.cts.ProcessMustUseSeccompTest#testMediaextractorHasSeccompFilter --android.security.cts.ProcessMustUseSeccompTest#testOmxHalHasSeccompFilter failed"
am: 07854560

Change-Id: I7b0221eab349005701576cf95d628911d2035644
parents 7a23fdd7 07854560

services/mediaextractor/Android.mk

+1 −1
Original line number Diff line number Diff line
@@ -26,7 +26,7 @@ LOCAL_CFLAGS := -Wall -Werror 
include $(BUILD_EXECUTABLE)



# service seccomp filter

ifeq ($(TARGET_ARCH), $(filter $(TARGET_ARCH), arm arm64 x86))

ifeq ($(TARGET_ARCH), $(filter $(TARGET_ARCH), arm arm64 x86 x86_64))

include $(CLEAR_VARS)

LOCAL_MODULE := mediaextractor.policy

LOCAL_MODULE_CLASS := ETC

services/mediaextractor/seccomp_policy/mediaextractor-x86_64.policy

0 → 100755
+57 −0
Original line number Diff line number Diff line 
# Organized by frequency of systemcall - in descending order for

# best performance.

ioctl: 1

futex: 1

prctl: 1

write: 1

getpriority: 1

close: 1

dup: 1

munmap: 1

mmap: 1

madvise: 1

openat: 1

clock_gettime: 1

writev: 1

brk: 1

mprotect: 1

read: 1

lseek: 1

clone: 1

getuid: 1

setpriority: 1

sigaltstack: 1

newfstatat: 1

restart_syscall: 1

exit: 1

exit_group: 1

rt_sigreturn: 1

faccessat: 1

sched_setscheduler: 1

getrlimit: 1

nanosleep: 1



# for FileSource

readlinkat: 1



# for attaching to debuggerd on process crash

tgkill: 1

socket: arg0 == 1

connect: 1

fcntl: 1

rt_sigprocmask: 1

rt_sigaction: 1

rt_tgsigqueueinfo: 1

geteuid: 1

getgid: 1

getegid: 1

getgroups: 1

getdents64: 1

pipe2: 1

ppoll: 1



# Required by AddressSanitizer

gettid: 1

sched_yield: 1

getpid: 1

gettid: 1