From e9e4222534cb3c7009a8bb4af4608d00f6552f64 Mon Sep 17 00:00:00 2001 From: Konsta Date: Mon, 7 Apr 2025 21:07:48 +0300 Subject: [PATCH] ffmpeg: move media codecs config & seccomp policy to device * https://github.com/raspberry-vanilla/android_external_ffmpeg_codec2/commit/71ac744017cc31d13a72e5f376a8d76b51aebcd2 --- device.mk | 4 + media/media_codecs_ffmpeg_c2.xml | 108 ++++++++++++++++++ .../android.hardware.media.c2-ffmpeg.policy | 57 +++++++++ 3 files changed, 169 insertions(+) create mode 100644 media/media_codecs_ffmpeg_c2.xml create mode 100644 seccomp_policy/android.hardware.media.c2-ffmpeg.policy diff --git a/device.mk b/device.mk index adff949..605a644 100644 --- a/device.mk +++ b/device.mk @@ -163,6 +163,10 @@ PRODUCT_COPY_FILES += \ PRODUCT_PACKAGES += \ com.android.hardware.media.c2.ffmpeg +PRODUCT_COPY_FILES += \ + $(DEVICE_PATH)/media/media_codecs_ffmpeg_c2.xml:$(TARGET_COPY_OUT_VENDOR)/etc/media_codecs_ffmpeg_c2.xml \ + $(DEVICE_PATH)/seccomp_policy/android.hardware.media.c2-ffmpeg.policy:$(TARGET_COPY_OUT_VENDOR)/etc/seccomp_policy/android.hardware.media.c2-ffmpeg.policy + # Gatekeeper PRODUCT_PACKAGES += \ com.android.hardware.gatekeeper.nonsecure diff --git a/media/media_codecs_ffmpeg_c2.xml b/media/media_codecs_ffmpeg_c2.xml new file mode 100644 index 0000000..1cd0aa4 --- /dev/null +++ b/media/media_codecs_ffmpeg_c2.xml @@ -0,0 +1,108 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/seccomp_policy/android.hardware.media.c2-ffmpeg.policy b/seccomp_policy/android.hardware.media.c2-ffmpeg.policy new file mode 100644 index 0000000..80d792f --- /dev/null +++ b/seccomp_policy/android.hardware.media.c2-ffmpeg.policy @@ -0,0 +1,57 @@ +# device specific syscalls +clock_gettime: 1 +clone: 1 +close: 1 +dup: 1 +eventfd2: 1 +exit_group: 1 +exit: 1 +faccessat: 1 +fstat: 1 +fstatfs: 1 +ftruncate: 1 +futex: 1 +getdents64: 1 +getegid: 1 +geteuid: 1 +getgid: 1 +getgroups: 1 +getpid: 1 +getrandom: 1 +getrlimit: 1 +gettid: 1 +gettimeofday: 1 +getuid: 1 +ioctl: 1 +lseek: 1 +madvise: 1 +memfd_create: 1 +mmap: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE +mprotect: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE +mremap: arg3 == 3 || arg3 == MREMAP_MAYMOVE +munmap: 1 +nanosleep: 1 +newfstatat: 1 +openat: 1 +pipe2: 1 +ppoll: 1 +prctl: 1 +pread64: 1 +process_vm_readv: 1 +read: 1 +readlinkat: 1 +recvmsg: 1 +restart_syscall: 1 +rt_sigaction: 1 +rt_sigprocmask: 1 +rt_sigreturn: 1 +rt_tgsigqueueinfo: 1 +sched_getaffinity: 1 +sched_yield: 1 +set_tid_address: 1 +setpriority: 1 +sigaltstack: 1 +sysinfo: 1 +tgkill: 1 +write: 1 +writev: 1