ffmpeg: move seccomp policy to external

device.mk

@@ -107,8 +107,7 @@ PRODUCT_PACKAGES += \
     com.android.hardware.media.c2.ffmpeg
 
 PRODUCT_COPY_FILES += \
-    $(DEVICE_PATH)/media/media_codecs_ffmpeg_c2.xml:$(TARGET_COPY_OUT_VENDOR)/etc/media_codecs_ffmpeg_c2.xml \
-    $(DEVICE_PATH)/seccomp_policy/android.hardware.media.c2-ffmpeg.policy:$(TARGET_COPY_OUT_VENDOR)/etc/seccomp_policy/android.hardware.media.c2-ffmpeg.policy
+    $(DEVICE_PATH)/media/media_codecs_ffmpeg_c2.xml:$(TARGET_COPY_OUT_VENDOR)/etc/media_codecs_ffmpeg_c2.xml
 
 # Gatekeeper
 PRODUCT_PACKAGES += \

seccomp_policy/android.hardware.media.c2-ffmpeg.policy

@@ -1,57 +0,0 @@
-# device specific syscalls
-clock_gettime: 1
-clone: 1
-close: 1
-dup: 1
-eventfd2: 1
-exit_group: 1
-exit: 1
-faccessat: 1
-fstat: 1
-fstatfs: 1
-ftruncate: 1
-futex: 1
-getdents64: 1
-getegid: 1
-geteuid: 1
-getgid: 1
-getgroups: 1
-getpid: 1
-getrandom: 1
-getrlimit: 1
-gettid: 1
-gettimeofday: 1
-getuid: 1
-ioctl: 1
-lseek: 1
-madvise: 1
-memfd_create: 1
-mmap: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
-mprotect: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
-mremap: arg3 == 3 || arg3 == MREMAP_MAYMOVE
-munmap: 1
-nanosleep: 1
-newfstatat: 1
-openat: 1
-pipe2: 1
-ppoll: 1
-prctl: 1
-pread64: 1
-process_vm_readv: 1
-read: 1
-readlinkat: 1
-recvmsg: 1
-restart_syscall: 1
-rt_sigaction: 1
-rt_sigprocmask: 1
-rt_sigreturn: 1
-rt_tgsigqueueinfo: 1
-sched_getaffinity: 1
-sched_yield: 1
-set_tid_address: 1
-setpriority: 1
-sigaltstack: 1
-sysinfo: 1
-tgkill: 1
-write: 1
-writev: 1