mediacodec: add seccomp filter for arm/arm64
mediacodec always runs in 32 bit mode so the arm seccomp filter is also
used on arm64 devices.
Tests: mediaserver CTS for bullhead, volantis and shamu
Add policy to log blocked syscalls to syslog and allow debuggerd attach
on mediacodec crash.
Bug: 27066802, 27064966
Change-Id: I4bdbba25b8847afa98d89b4b4ca863829fa19754
diff --git a/services/mediacodec/main_codecservice.cpp b/services/mediacodec/main_codecservice.cpp
index aedf0c3..a2868c1 100644
--- a/services/mediacodec/main_codecservice.cpp
+++ b/services/mediacodec/main_codecservice.cpp
@@ -1,6 +1,6 @@
/*
**
-** Copyright 2015, The Android Open Source Project
+** Copyright 2016, The Android Open Source Project
**
** Licensed under the Apache License, Version 2.0 (the "License");
** you may not use this file except in compliance with the License.
@@ -28,6 +28,7 @@
// from LOCAL_C_INCLUDES
#include "MediaCodecService.h"
+#include "minijail/minijail.h"
using namespace android;
@@ -35,6 +36,7 @@
{
ALOGI("@@@ mediacodecservice starting");
signal(SIGPIPE, SIG_IGN);
+ MiniJail();
strcpy(argv[0], "media.codec");
sp<ProcessState> proc(ProcessState::self());