From 67114b009f4194526e79ccdf58c41fbd549ac3c6 Mon Sep 17 00:00:00 2001
From: "Christopher R. Palmer" <crpalmer@gmail.com>
Date: Mon, 1 May 2017 06:28:26 -0400
Subject: [PATCH] seccomp: Fix policy for ffmpeg

Without this, a bunch of cts tests fail.  For example:

android.media.cts.AdaptivePlaybackTest#testMpeg4_adaptiveDrc

fails with the log message:

E/media.codec( 8194): libminijail: blocked syscall: getdents64

and

android.security.cts.StagefrightTest#testStagefright_bug_25765591

fails because of a blocked call to nanosleep.

Change-Id: Iba99163c86e2941a8e821136188ddb3cf4d34a5c
---
 seccomp_policy/mediacodec.policy     | 2 ++
 seccomp_policy/mediaextractor.policy | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/seccomp_policy/mediacodec.policy b/seccomp_policy/mediacodec.policy
index d6b05fa..de6da1c 100644
--- a/seccomp_policy/mediacodec.policy
+++ b/seccomp_policy/mediacodec.policy
@@ -8,3 +8,5 @@ eventfd2: 1
 sendto: 1
 recvfrom: 1
 getsockopt: 1
+# ffmpeg needs this
+getdents64: 1
diff --git a/seccomp_policy/mediaextractor.policy b/seccomp_policy/mediaextractor.policy
index 246c022..0aeeef3 100644
--- a/seccomp_policy/mediaextractor.policy
+++ b/seccomp_policy/mediaextractor.policy
@@ -1,2 +1,4 @@
 # device specific syscalls
 clock_gettime: 1
+# ffmpeg needs this
+nanosleep: 1