diff --git a/device.mk b/device.mk index 26c3ce4..74d887b 100644 --- a/device.mk +++ b/device.mk @@ -163,6 +163,10 @@ PRODUCT_COPY_FILES += \ PRODUCT_PACKAGES += \ android.hardware.media.c2@1.2-service-ffmpeg +PRODUCT_COPY_FILES += \ + $(DEVICE_PATH)/media/media_codecs_ffmpeg_c2.xml:$(TARGET_COPY_OUT_VENDOR)/etc/media_codecs_ffmpeg_c2.xml \ + $(DEVICE_PATH)/seccomp_policy/android.hardware.media.c2-ffmpeg.policy:$(TARGET_COPY_OUT_VENDOR)/etc/seccomp_policy/android.hardware.media.c2-ffmpeg.policy + # Gatekeeper PRODUCT_PACKAGES += \ com.android.hardware.gatekeeper.nonsecure diff --git a/media/media_codecs_ffmpeg_c2.xml b/media/media_codecs_ffmpeg_c2.xml new file mode 100644 index 0000000..1cd0aa4 --- /dev/null +++ b/media/media_codecs_ffmpeg_c2.xml @@ -0,0 +1,108 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/seccomp_policy/android.hardware.media.c2-ffmpeg.policy b/seccomp_policy/android.hardware.media.c2-ffmpeg.policy new file mode 100644 index 0000000..80d792f --- /dev/null +++ b/seccomp_policy/android.hardware.media.c2-ffmpeg.policy @@ -0,0 +1,57 @@ +# device specific syscalls +clock_gettime: 1 +clone: 1 +close: 1 +dup: 1 +eventfd2: 1 +exit_group: 1 +exit: 1 +faccessat: 1 +fstat: 1 +fstatfs: 1 +ftruncate: 1 +futex: 1 +getdents64: 1 +getegid: 1 +geteuid: 1 +getgid: 1 +getgroups: 1 +getpid: 1 +getrandom: 1 +getrlimit: 1 +gettid: 1 +gettimeofday: 1 +getuid: 1 +ioctl: 1 +lseek: 1 +madvise: 1 +memfd_create: 1 +mmap: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE +mprotect: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE +mremap: arg3 == 3 || arg3 == MREMAP_MAYMOVE +munmap: 1 +nanosleep: 1 +newfstatat: 1 +openat: 1 +pipe2: 1 +ppoll: 1 +prctl: 1 +pread64: 1 +process_vm_readv: 1 +read: 1 +readlinkat: 1 +recvmsg: 1 +restart_syscall: 1 +rt_sigaction: 1 +rt_sigprocmask: 1 +rt_sigreturn: 1 +rt_tgsigqueueinfo: 1 +sched_getaffinity: 1 +sched_yield: 1 +set_tid_address: 1 +setpriority: 1 +sigaltstack: 1 +sysinfo: 1 +tgkill: 1 +write: 1 +writev: 1