mirror of
https://github.com/Moyster/o_vendor_mediatek
synced 2024-06-16 18:58:33 +02:00
configure seccomp_policy for android O
before this patch david@david-desktop:~/Scaricati$ adb logcat | grep mediacodec.policy 10-18 19:45:44.216 1670 1670 W /vendor/bin/hw/android.hardware.media.omx@1.0-service: Could not read additional policy file '/vendor/etc/seccomp_policy/mediacodec.policy' after this patch david@david-desktop:~/Scaricati$ adb logcat | grep mediacodec 10-18 19:48:34.338 576 576 I /vendor/bin/hw/android.hardware.media.omx@1.0-service: mediacodecservice starting Signed-off-by: Mister Oyster <oysterized@gmail.com>
This commit is contained in:
parent
767e82aeb1
commit
c3832a2f62
|
@ -2,5 +2,6 @@ VND_MTK_PATH := vendor/mediatek
|
|||
|
||||
TARGET_SPECIFIC_HEADER_PATH := $(VND_MTK_PATH)/include
|
||||
|
||||
# Seccomp filter
|
||||
BOARD_SECCOMP_POLICY := $(VND_MTK_PATH)/seccomp
|
||||
# Seccomp policy
|
||||
PRODUCT_COPY_FILES += \
|
||||
$(VND_MTK_PATH)/seccomp_policy/mediacodec.policy:system/vendor/etc/seccomp_policy/mediacodec.policy
|
||||
|
|
|
@ -1,5 +1,10 @@
|
|||
# device specific syscalls
|
||||
# extension of services/mediacodec/minijail/seccomp_policy/mediacodec-seccomp-arm.policy
|
||||
# extension of services/mediacodec/minijail/seccomp_policy/mediacodec-arm.policy
|
||||
sched_getscheduler: 1
|
||||
sched_setaffinity: 1
|
||||
sched_getparam: 1
|
||||
pselect6: 1
|
||||
eventfd2: 1
|
||||
sendto: 1
|
||||
recvfrom: 1
|
||||
getsockopt: 1
|
Loading…
Reference in New Issue
Block a user