diff options
| author | Christopher R. Palmer <crpalmer@gmail.com> | 2017-05-01 06:28:26 -0400 |
|---|---|---|
| committer | Mister Oyster <oysterized@gmail.com> | 2017-12-08 16:34:02 +0100 |
| commit | 67114b009f4194526e79ccdf58c41fbd549ac3c6 (patch) | |
| tree | d13c691f781c540ee363c4323c8459139f32b04b /seccomp_policy | |
| parent | 3568b30721d72f056f24e46678fdec005126a2fd (diff) | |
seccomp: Fix policy for ffmpeg
Without this, a bunch of cts tests fail. For example:
android.media.cts.AdaptivePlaybackTest#testMpeg4_adaptiveDrc
fails with the log message:
E/media.codec( 8194): libminijail: blocked syscall: getdents64
and
android.security.cts.StagefrightTest#testStagefright_bug_25765591
fails because of a blocked call to nanosleep.
Change-Id: Iba99163c86e2941a8e821136188ddb3cf4d34a5c
Diffstat (limited to 'seccomp_policy')
| -rw-r--r-- | seccomp_policy/mediacodec.policy | 2 | ||||
| -rw-r--r-- | seccomp_policy/mediaextractor.policy | 2 |
2 files changed, 4 insertions, 0 deletions
diff --git a/seccomp_policy/mediacodec.policy b/seccomp_policy/mediacodec.policy index d6b05fa..de6da1c 100644 --- a/seccomp_policy/mediacodec.policy +++ b/seccomp_policy/mediacodec.policy @@ -8,3 +8,5 @@ eventfd2: 1 sendto: 1 recvfrom: 1 getsockopt: 1 +# ffmpeg needs this +getdents64: 1 diff --git a/seccomp_policy/mediaextractor.policy b/seccomp_policy/mediaextractor.policy index 246c022..0aeeef3 100644 --- a/seccomp_policy/mediaextractor.policy +++ b/seccomp_policy/mediaextractor.policy @@ -1,2 +1,4 @@ # device specific syscalls clock_gettime: 1 +# ffmpeg needs this +nanosleep: 1 |