| commit | bc977d0df4cdea9f00bff0771db3e4d27190586c | [log] [tgz] |
|---|---|---|
| author | Joel Fernandes <joelaf@google.com> | Thu Feb 07 09:23:55 2019 -0500 |
| committer | Joel Fernandes <joelaf@google.com> | Thu Feb 07 09:23:55 2019 -0500 |
| tree | d304f552dd077ad729fcc43fc546ea55c7be86a4 | |
| parent | 479b735392d6e4b9d7dde9403e732847b670a9f1 [diff] |
Add syscalls to the allowed list These changes are to make it in sync with the internal repository. Change-Id: I45e207a6ef887acd89239c7c73f046cb42fdb845 Signed-off-by: Joel Fernandes <joelaf@google.com>
diff --git a/services/mediacodec/seccomp_policy/mediacodec-arm.policy b/services/mediacodec/seccomp_policy/mediacodec-arm.policy index 56d7f27..3870a11 100644 --- a/services/mediacodec/seccomp_policy/mediacodec-arm.policy +++ b/services/mediacodec/seccomp_policy/mediacodec-arm.policy
@@ -14,6 +14,7 @@ mmap2: 1 getrandom: 1 memfd_create: 1 +ftruncate: 1 ftruncate64: 1 # mremap: Ensure |flags| are (MREMAP_MAYMOVE | MREMAP_FIXED) TODO: Once minijail
diff --git a/services/mediacodec/seccomp_policy/mediacodec-x86.policy b/services/mediacodec/seccomp_policy/mediacodec-x86.policy index 821e69f..b4f5ee9 100644 --- a/services/mediacodec/seccomp_policy/mediacodec-x86.policy +++ b/services/mediacodec/seccomp_policy/mediacodec-x86.policy
@@ -50,6 +50,9 @@ nanosleep: 1 sched_setscheduler: 1 uname: 1 +memfd_create: 1 +ftruncate: 1 +ftruncate64: 1 # Required by AddressSanitizer gettid: 1