pa-fazil
/
android_device_qcom_common
mirror of https://github.com/fazilsheik96/android_device_qcom_common.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

common: Move SECCOMP extensions to QCOM common. 

Change-Id: I9a836f242b4621480db75cb07636e40720052e54
This commit is contained in:
Alexander Koskovich 2020-12-02 12:15:04 -07:00
parent 84d043d161
commit e3e653fcc2
No known key found for this signature in database
GPG Key ID: F1107C9A417AC130
5 changed files with 51 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
common.mk
View File

@ -154,6 +154,13 @@ PRODUCT_PACKAGES += \
android.hardware.power-service android.hardware.power-service
endif endif
# SECCOMP Extensions
PRODUCT_COPY_FILES += \
$(DEVICE_PATH)/seccomp/codec2.software.ext.policy:$(TARGET_COPY_OUT_VENDOR)/etc/seccomp_policy/codec2.software.ext.policy \
$(DEVICE_PATH)/seccomp/codec2.vendor.ext.policy:$(TARGET_COPY_OUT_VENDOR)/etc/seccomp_policy/codec2.vendor.ext.policy \
$(DEVICE_PATH)/seccomp/mediacodec-seccomp.policy:$(TARGET_COPY_OUT_VENDOR)/etc/seccomp_policy/mediacodec.policy \
$(DEVICE_PATH)/seccomp/mediaextractor-seccomp.policy:$(TARGET_COPY_OUT_VENDOR)/etc/seccomp_policy/mediaextractor.policy
ifeq ($(TARGET_COMMON_QTI_COMPONENTS), all) ifeq ($(TARGET_COMMON_QTI_COMPONENTS), all)
TARGET_COMMON_QTI_COMPONENTS := \ TARGET_COMMON_QTI_COMPONENTS := \
audio \ audio \

9
seccomp/codec2.software.ext.policy Normal file
View File

@ -0,0 +1,9 @@
# device specific syscalls
pselect6: 1
eventfd2: 1
sendto: 1
recvfrom: 1
_llseek: 1
sysinfo: 1
getcwd: 1
getdents64: 1

9
seccomp/codec2.vendor.ext.policy Normal file
View File

@ -0,0 +1,9 @@
# device specific syscalls
pselect6: 1
eventfd2: 1
sendto: 1
recvfrom: 1
_llseek: 1
sysinfo: 1
getcwd: 1
getdents64: 1

21
seccomp/mediacodec-seccomp.policy Normal file
View File

@ -0,0 +1,21 @@
# device specific syscalls
# extension of services/mediacodec/minijail/seccomp_policy/mediacodec-seccomp-arm.policy
pselect6: 1
eventfd2: 1
sendto: 1
recvfrom: 1
_llseek: 1
sysinfo: 1
getcwd: 1
getdents64: 1
ARM_cacheflush: 1
inotify_init1: 1
inotify_add_watch: 1
inotify_rm_watch: 1
uname: 1
ueventd: 1
timer_create: 1
timer_settime: 1
rt_sigtimedwait: 1
readlink: 1
open: 1

5
seccomp/mediaextractor-seccomp.policy Normal file
View File

@ -0,0 +1,5 @@
# device specific syscalls.
# extension of services/mediaextractor/minijail/seccomp_policy/mediaextractor-seccomp-arm.policy
readlinkat: 1
pread64: 1
mremap: 1