commit | 5812a529e486b2bd5a90ae8183fc4291bb9a905d | [log] [tgz] |
---|---|---|
author | Joel Fernandes <joelaf@google.com> | Thu Feb 07 11:01:25 2019 -0800 |
committer | android-build-merger <android-build-merger@google.com> | Thu Feb 07 11:01:25 2019 -0800 |
tree | 370b0860647d7211fc421727fda867840518f754 | |
parent | 1d2eedd9b94cf990ae763882a55dd4ac34f00a62 [diff] | |
parent | b4e48f1c6d8d7efd7191081e7594880102bc236a [diff] |
Merge "Add syscalls to the allowed list" am: b4e48f1c6d Change-Id: I2b36cdf7a184b3189740a17e00883eec475b483f
diff --git a/services/mediacodec/seccomp_policy/mediacodec-arm.policy b/services/mediacodec/seccomp_policy/mediacodec-arm.policy index 56d7f27..3870a11 100644 --- a/services/mediacodec/seccomp_policy/mediacodec-arm.policy +++ b/services/mediacodec/seccomp_policy/mediacodec-arm.policy
@@ -14,6 +14,7 @@ mmap2: 1 getrandom: 1 memfd_create: 1 +ftruncate: 1 ftruncate64: 1 # mremap: Ensure |flags| are (MREMAP_MAYMOVE | MREMAP_FIXED) TODO: Once minijail
diff --git a/services/mediacodec/seccomp_policy/mediacodec-x86.policy b/services/mediacodec/seccomp_policy/mediacodec-x86.policy index 821e69f..b4f5ee9 100644 --- a/services/mediacodec/seccomp_policy/mediacodec-x86.policy +++ b/services/mediacodec/seccomp_policy/mediacodec-x86.policy
@@ -50,6 +50,9 @@ nanosleep: 1 sched_setscheduler: 1 uname: 1 +memfd_create: 1 +ftruncate: 1 +ftruncate64: 1 # Required by AddressSanitizer gettid: 1