msm8976-common: Drop mediaextractor seccomp policy

These syscalls are now allowed by default. [arco] Also clean mediacodec.policy
3 years ago · 87bfe39e45
parent ecce5c6cb9
commit 87bfe39e45
3 changed files with 1 additions and 7 deletions
--- a/msm8976.mk
+++ b/msm8976.mk
@ -259,8 +259,7 @@ PRODUCT_PACKAGES += \

 # Seccomp
 PRODUCT_COPY_FILES += \
-    $(LOCAL_PATH)/seccomp/mediacodec-seccomp.policy:$(TARGET_COPY_OUT_VENDOR)/etc/seccomp_policy/mediacodec.policy \
-    $(LOCAL_PATH)/seccomp/mediaextractor-seccomp.policy:$(TARGET_COPY_OUT_VENDOR)/etc/seccomp_policy/mediaextractor.policy
+    $(LOCAL_PATH)/seccomp/mediacodec-seccomp.policy:$(TARGET_COPY_OUT_VENDOR)/etc/seccomp_policy/mediacodec.policy

 # Sensors
 PRODUCT_PACKAGES += \
--- a/seccomp/mediacodec-seccomp.policy
+++ b/seccomp/mediacodec-seccomp.policy
@ -4,4 +4,3 @@ pselect6: 1
 eventfd2: 1
 sendto: 1
 recvfrom: 1
-_llseek: 1
--- a/seccomp/mediaextractor-seccomp.policy
+++ b/seccomp/mediaextractor-seccomp.policy
@ -1,4 +0,0 @@
-# device specific syscalls.
-# extension of services/mediaextractor/minijail/seccomp_policy/mediaextractor-seccomp-arm.policy
-readlinkat: 1
-pread64: 1