sanders: update seccomp_policy
* add mediaextractor policy
This commit is contained in:
@@ -1,5 +1,12 @@
|
|||||||
# device specific syscalls
|
# device specific syscalls
|
||||||
|
# extension of services/mediacodec/minijail/seccomp_policy/mediacodec-seccomp-arm.policy
|
||||||
pselect6: 1
|
pselect6: 1
|
||||||
eventfd2: 1
|
eventfd2: 1
|
||||||
sendto: 1
|
sendto: 1
|
||||||
recvfrom: 1
|
recvfrom: 1
|
||||||
|
_llseek: 1
|
||||||
|
sysinfo: 1
|
||||||
|
getcwd: 1
|
||||||
|
getdents64: 1
|
||||||
|
inotify_init1: 1
|
||||||
|
inotify_add_watch: 1
|
||||||
|
|||||||
4
seccomp_policy/mediaextractor.policy
Normal file
4
seccomp_policy/mediaextractor.policy
Normal file
@@ -0,0 +1,4 @@
|
|||||||
|
# device specific syscalls.
|
||||||
|
# extension of services/mediaextractor/minijail/seccomp_policy/mediaextractor-seccomp-arm.policy
|
||||||
|
readlinkat: 1
|
||||||
|
pread64: 1
|
||||||
Reference in New Issue
Block a user