Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit d648399d authored by Joel Fernandes's avatar Joel Fernandes
Browse files

Add memfd related syscalls to allowed list 



Required for migration of ashmem to memfd.

Bug: 113362644
Change-Id: I5c63ff130f67481deed5c8d975830463716c397c
Signed-off-by: default avatarJoel Fernandes <joelaf@google.com>
parent 8ce16d86

services/mediacodec/seccomp_policy/mediacodec-arm.policy

+2 −0
Original line number Diff line number Diff line
@@ -13,6 +13,8 @@ dup: 1 
ppoll: 1

mmap2: 1

getrandom: 1

memfd_create: 1

ftruncate64: 1



# mremap: Ensure |flags| are (MREMAP_MAYMOVE | MREMAP_FIXED) TODO: Once minijail

# parser support for '<' is in this needs to be modified to also prevent

services/mediacodec/seccomp_policy/mediaswcodec-arm.policy

+2 −0
Original line number Diff line number Diff line
@@ -21,6 +21,8 @@ dup: 1 
ppoll: 1

mprotect: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE

mmap2: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE

memfd_create: 1

ftruncate64: 1



# mremap: Ensure |flags| are (MREMAP_MAYMOVE | MREMAP_FIXED) TODO: Once minijail

# parser support for '<' is in this needs to be modified to also prevent

services/mediacodec/seccomp_policy/mediaswcodec-arm64.policy

+2 −0
Original line number Diff line number Diff line
@@ -26,6 +26,8 @@ getrlimit: 1 
fstat: 1

newfstatat: 1

fstatfs: 1

memfd_create: 1

ftruncate64: 1



# mremap: Ensure |flags| are (MREMAP_MAYMOVE | MREMAP_FIXED) TODO: Once minijail

# parser support for '<' is in this needs to be modified to also prevent