ffmpeg: move media codecs config & seccomp policy to device
* 71ac744017
This commit is contained in:
57
seccomp_policy/android.hardware.media.c2-ffmpeg.policy
Normal file
57
seccomp_policy/android.hardware.media.c2-ffmpeg.policy
Normal file
@@ -0,0 +1,57 @@
|
||||
# device specific syscalls
|
||||
clock_gettime: 1
|
||||
clone: 1
|
||||
close: 1
|
||||
dup: 1
|
||||
eventfd2: 1
|
||||
exit_group: 1
|
||||
exit: 1
|
||||
faccessat: 1
|
||||
fstat: 1
|
||||
fstatfs: 1
|
||||
ftruncate: 1
|
||||
futex: 1
|
||||
getdents64: 1
|
||||
getegid: 1
|
||||
geteuid: 1
|
||||
getgid: 1
|
||||
getgroups: 1
|
||||
getpid: 1
|
||||
getrandom: 1
|
||||
getrlimit: 1
|
||||
gettid: 1
|
||||
gettimeofday: 1
|
||||
getuid: 1
|
||||
ioctl: 1
|
||||
lseek: 1
|
||||
madvise: 1
|
||||
memfd_create: 1
|
||||
mmap: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
|
||||
mprotect: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
|
||||
mremap: arg3 == 3 || arg3 == MREMAP_MAYMOVE
|
||||
munmap: 1
|
||||
nanosleep: 1
|
||||
newfstatat: 1
|
||||
openat: 1
|
||||
pipe2: 1
|
||||
ppoll: 1
|
||||
prctl: 1
|
||||
pread64: 1
|
||||
process_vm_readv: 1
|
||||
read: 1
|
||||
readlinkat: 1
|
||||
recvmsg: 1
|
||||
restart_syscall: 1
|
||||
rt_sigaction: 1
|
||||
rt_sigprocmask: 1
|
||||
rt_sigreturn: 1
|
||||
rt_tgsigqueueinfo: 1
|
||||
sched_getaffinity: 1
|
||||
sched_yield: 1
|
||||
set_tid_address: 1
|
||||
setpriority: 1
|
||||
sigaltstack: 1
|
||||
sysinfo: 1
|
||||
tgkill: 1
|
||||
write: 1
|
||||
writev: 1
|
||||
Reference in New Issue
Block a user