From f1c960d48ed01987def68ae60ae7892793ad329b Mon Sep 17 00:00:00 2001
From: Konsta <konsta09@gmail.com>
Date: Wed, 22 Oct 2025 22:44:20 +0300
Subject: [PATCH] ffmpeg: move seccomp policy to external

---
 device.mk                                     |  3 +-
 .../android.hardware.media.c2-ffmpeg.policy   | 57 -------------------
 2 files changed, 1 insertion(+), 59 deletions(-)
 delete mode 100644 seccomp_policy/android.hardware.media.c2-ffmpeg.policy

diff --git a/device.mk b/device.mk
index fe69d0e..3f0a906 100644
--- a/device.mk
+++ b/device.mk
@@ -107,8 +107,7 @@ PRODUCT_PACKAGES += \
     com.android.hardware.media.c2.ffmpeg
 
 PRODUCT_COPY_FILES += \
-    $(DEVICE_PATH)/media/media_codecs_ffmpeg_c2.xml:$(TARGET_COPY_OUT_VENDOR)/etc/media_codecs_ffmpeg_c2.xml \
-    $(DEVICE_PATH)/seccomp_policy/android.hardware.media.c2-ffmpeg.policy:$(TARGET_COPY_OUT_VENDOR)/etc/seccomp_policy/android.hardware.media.c2-ffmpeg.policy
+    $(DEVICE_PATH)/media/media_codecs_ffmpeg_c2.xml:$(TARGET_COPY_OUT_VENDOR)/etc/media_codecs_ffmpeg_c2.xml
 
 # Gatekeeper
 PRODUCT_PACKAGES += \
diff --git a/seccomp_policy/android.hardware.media.c2-ffmpeg.policy b/seccomp_policy/android.hardware.media.c2-ffmpeg.policy
deleted file mode 100644
index 80d792f..0000000
--- a/seccomp_policy/android.hardware.media.c2-ffmpeg.policy
+++ /dev/null
@@ -1,57 +0,0 @@
-# device specific syscalls
-clock_gettime: 1
-clone: 1
-close: 1
-dup: 1
-eventfd2: 1
-exit_group: 1
-exit: 1
-faccessat: 1
-fstat: 1
-fstatfs: 1
-ftruncate: 1
-futex: 1
-getdents64: 1
-getegid: 1
-geteuid: 1
-getgid: 1
-getgroups: 1
-getpid: 1
-getrandom: 1
-getrlimit: 1
-gettid: 1
-gettimeofday: 1
-getuid: 1
-ioctl: 1
-lseek: 1
-madvise: 1
-memfd_create: 1
-mmap: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
-mprotect: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
-mremap: arg3 == 3 || arg3 == MREMAP_MAYMOVE
-munmap: 1
-nanosleep: 1
-newfstatat: 1
-openat: 1
-pipe2: 1
-ppoll: 1
-prctl: 1
-pread64: 1
-process_vm_readv: 1
-read: 1
-readlinkat: 1
-recvmsg: 1
-restart_syscall: 1
-rt_sigaction: 1
-rt_sigprocmask: 1
-rt_sigreturn: 1
-rt_tgsigqueueinfo: 1
-sched_getaffinity: 1
-sched_yield: 1
-set_tid_address: 1
-setpriority: 1
-sigaltstack: 1
-sysinfo: 1
-tgkill: 1
-write: 1
-writev: 1