commit 5f289ea40afad237ccd0433098b7aa84b5a9e730
author wenchangliu <wenchangliu@google.com> Mon Mar 30 10:43:53 2020 +0800
committer wenchangliu <wenchangliu@google.com> Mon Mar 30 21:01:05 2020 +0800
tree e7f305ec7364fbc3b8272d1da106d37959d5b60a
parent 92ee1dc302eca0bc4123b396acdc941c8af5a3ab

crosshatch: Add seccomp policy for Codec2 process

Add seccomp policy for Codec2 process

Bug: 149511958
Test: adb shell killall vendor.qti.media.c2@1.0-service
Change-Id: I118621e85178bcd9557063ffa1098ed7cc7ec336

device.mk

diff --git a/device.mk b/device.mk
index 2157550..4c43fd5 100644
--- a/device.mk
+++ b/device.mk
@@ -460,6 +460,8 @@
 PRODUCT_PACKAGES += \
     libqcodec2 \
     vendor.qti.media.c2@1.0-service \
+    codec2.vendor.ext.policy \
+    codec2.vendor.base.policy
 
 PRODUCT_PACKAGES += \
     android.hardware.camera.provider@2.4-impl \
@@ -613,7 +615,6 @@
 
 # Vendor seccomp policy files for media components:
 PRODUCT_COPY_FILES += \
-    $(LOCAL_PATH)/seccomp_policy/codec2.vendor.ext.policy:$(TARGET_COPY_OUT_VENDOR)/etc/seccomp_policy/codec2.vendor.ext.policy \
     $(LOCAL_PATH)/seccomp_policy/mediacodec.policy:$(TARGET_COPY_OUT_VENDOR)/etc/seccomp_policy/mediacodec.policy
 
 ifneq (,$(filter userdebug eng, $(TARGET_BUILD_VARIANT)))

seccomp_policy/codec2.vendor.ext.policy

diff --git a/seccomp_policy/codec2.vendor.ext.policy b/seccomp_policy/codec2.vendor.ext.policy
deleted file mode 100644
index 07b7bf7..0000000
--- a/seccomp_policy/codec2.vendor.ext.policy
+++ /dev/null
@@ -1,9 +0,0 @@
-# device specific syscalls
-pselect6: 1
-eventfd2: 1
-sendto: 1
-recvfrom: 1
-_llseek: 1
-sysinfo: 1
-getcwd: 1
-getdents64: 1