| commit | b7df148460403530a9ea1da34babdf3f1c72a529 | [log] [tgz] |
|---|---|---|
| author | Daniel Micay <danielmicay@gmail.com> | Fri Sep 29 04:24:34 2017 +0000 |
| committer | android-build-merger <android-build-merger@google.com> | Fri Sep 29 04:24:34 2017 +0000 |
| tree | 913f6ee7cd33c2a6dee698f9c95044dbddd0e6c6 | |
| parent | 9ca893de79b9318460c3c981848d2ab5997233e7 [diff] | |
| parent | 0d51135defebfe9bf0d790216ee4668c96041224 [diff] |
Merge "whitelist getrandom for arc4random usage" am: 0d51135def Change-Id: I5023c836dfe6b7c6085f1693cf73463878fea1f0
diff --git a/services/mediacodec/seccomp_policy/mediacodec-arm.policy b/services/mediacodec/seccomp_policy/mediacodec-arm.policy index 4c4b594..a751b4c 100644 --- a/services/mediacodec/seccomp_policy/mediacodec-arm.policy +++ b/services/mediacodec/seccomp_policy/mediacodec-arm.policy
@@ -53,6 +53,7 @@ fstatat64: 1 ugetrlimit: 1 getdents64: 1 +getrandom: 1 # for attaching to debuggerd on process crash sigaction: 1
diff --git a/services/mediaextractor/seccomp_policy/mediaextractor-arm.policy b/services/mediaextractor/seccomp_policy/mediaextractor-arm.policy index e06ac8c..4fa69d7 100644 --- a/services/mediaextractor/seccomp_policy/mediaextractor-arm.policy +++ b/services/mediaextractor/seccomp_policy/mediaextractor-arm.policy
@@ -39,6 +39,7 @@ getegid32: 1 getgroups32: 1 nanosleep: 1 +getrandom: 1 # for FileSource readlinkat: 1
diff --git a/services/mediaextractor/seccomp_policy/mediaextractor-arm64.policy b/services/mediaextractor/seccomp_policy/mediaextractor-arm64.policy index 7c2a790..d1278a9 100644 --- a/services/mediaextractor/seccomp_policy/mediaextractor-arm64.policy +++ b/services/mediaextractor/seccomp_policy/mediaextractor-arm64.policy
@@ -28,6 +28,7 @@ rt_sigreturn: 1 getrlimit: 1 nanosleep: 1 +getrandom: 1 # for FileSource readlinkat: 1
diff --git a/services/mediaextractor/seccomp_policy/mediaextractor-x86.policy b/services/mediaextractor/seccomp_policy/mediaextractor-x86.policy index cdff4db..3b37f92 100644 --- a/services/mediaextractor/seccomp_policy/mediaextractor-x86.policy +++ b/services/mediaextractor/seccomp_policy/mediaextractor-x86.policy
@@ -37,6 +37,7 @@ getegid32: 1 getgroups32: 1 nanosleep: 1 +getrandom: 1 # for FileSource readlinkat: 1