summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAlex Naidis <alex.naidis@linux.com>2016-10-26 19:08:24 +0200
committeralk3pInjection <webmaster@raspii.tech>2022-01-16 08:10:05 +0800
commit3dcf5ae30e0f385c42c8f9ae6e46d9e063292b7f (patch)
treecfd99cbb0c2d25c1fcb0b029606dfbd179aeaa6e
parentcb184acc7d974236cc95cb3777b8886a010a6c7c (diff)
common: Add QC mediacodec extensions
Qualcomm added these to thulium (msm8996). However since the AV stack is shared across the chipsets it is required for all devices which inherit device/qcom/common. This commit squashes the following commits: mediaextractor: allow pread64 and readlinkat syscalls Add pread64 and readlinkat syscalls. Change-Id: Ic466e6d401fea5c9b47a9e3abf388cdae1a90f93 Signed-off-by: Alex Naidis <alex.naidis@linux.com> mediacodec: allow sendto and recvfrom syscalls Add sendto and recvfrom syscalls CRs-Fixed: 1001945 Change-Id: Id4287b742f8c559f4e566a687578abdd100ffe4c Signed-off-by: Alex Naidis <alex.naidis@linux.com> mediacodec: allow lseek syscall Add _lseek syscall to make file operations are successful. Change-Id: I746bf6a9fd5492a359086f8003a771234337e61d Signed-off-by: Alex Naidis <alex.naidis@linux.com>
-rw-r--r--common.mk7
-rw-r--r--seccomp/mediacodec-seccomp.policy7
-rw-r--r--seccomp/mediaextractor-seccomp.policy4
3 files changed, 18 insertions, 0 deletions
diff --git a/common.mk b/common.mk
index d55bcff..ba5ed43 100644
--- a/common.mk
+++ b/common.mk
@@ -24,6 +24,13 @@ TARGET_USES_QCOM_MM_AUDIO := true
# Skip boot jars check
SKIP_BOOT_JARS_CHECK := true
+# SECCOMP Extension
+BOARD_SECCOMP_POLICY += device/qcom/common/seccomp
+
+PRODUCT_COPY_FILES += \
+ device/qcom/common/seccomp/mediacodec-seccomp.policy:$(TARGET_COPY_OUT_VENDOR)/etc/seccomp_policy/mediacodec.policy \
+ device/qcom/common/seccomp/mediaextractor-seccomp.policy:$(TARGET_COPY_OUT_VENDOR)/etc/seccomp_policy/mediaextractor.policy
+
# QCOM HW crypto
ifeq ($(TARGET_HW_DISK_ENCRYPTION),true)
TARGET_CRYPTFS_HW_PATH ?= vendor/qcom/opensource/commonsys/cryptfs_hw
diff --git a/seccomp/mediacodec-seccomp.policy b/seccomp/mediacodec-seccomp.policy
new file mode 100644
index 0000000..f04ecba
--- /dev/null
+++ b/seccomp/mediacodec-seccomp.policy
@@ -0,0 +1,7 @@
+# device specific syscalls
+# extension of services/mediacodec/minijail/seccomp_policy/mediacodec-seccomp-arm.policy
+pselect6: 1
+eventfd2: 1
+sendto: 1
+recvfrom: 1
+_llseek: 1
diff --git a/seccomp/mediaextractor-seccomp.policy b/seccomp/mediaextractor-seccomp.policy
new file mode 100644
index 0000000..77c1e2a
--- /dev/null
+++ b/seccomp/mediaextractor-seccomp.policy
@@ -0,0 +1,4 @@
+# device specific syscalls.
+# extension of services/mediaextractor/minijail/seccomp_policy/mediaextractor-seccomp-arm.policy
+readlinkat: 1
+pread64: 1