| Jeff Vander Stoep | 125c045 | 2015-12-11 15:22:00 -0800 | [diff] [blame] | 1 | LOCAL_PATH := $(call my-dir) |
| 2 | |
| Jeff Vander Stoep | 95bab28 | 2016-01-08 09:02:40 -0800 | [diff] [blame] | 3 | ifeq ($(TARGET_ARCH), $(filter $(TARGET_ARCH), arm arm64 x86 x86_64)) |
| Jeff Vander Stoep | 125c045 | 2015-12-11 15:22:00 -0800 | [diff] [blame] | 4 | include $(CLEAR_VARS) |
| 5 | LOCAL_MODULE := mediaextractor-seccomp.policy |
| 6 | LOCAL_MODULE_CLASS := ETC |
| Dan Willemsen | 1a6f801 | 2016-01-08 21:32:47 -0800 | [diff] [blame] | 7 | LOCAL_MODULE_PATH := $(TARGET_OUT)/etc/seccomp_policy |
| Jeff Vander Stoep | 125c045 | 2015-12-11 15:22:00 -0800 | [diff] [blame] | 8 | |
| 9 | # mediaextractor runs in 32-bit combatibility mode. For 64 bit architectures, |
| 10 | # use the 32 bit policy |
| 11 | ifdef TARGET_2ND_ARCH |
| 12 | LOCAL_SRC_FILES := $(LOCAL_PATH)/seccomp_policy/mediaextractor-seccomp-$(TARGET_2ND_ARCH).policy |
| 13 | else |
| 14 | LOCAL_SRC_FILES := $(LOCAL_PATH)/seccomp_policy/mediaextractor-seccomp-$(TARGET_ARCH).policy |
| 15 | endif |
| 16 | |
| 17 | # allow device specific additions to the syscall whitelist |
| 18 | ifneq (,$(wildcard $(BOARD_SECCOMP_POLICY)/mediaextractor-seccomp.policy)) |
| 19 | LOCAL_SRC_FILES += $(BOARD_SECCOMP_POLICY)/mediaextractor-seccomp.policy |
| 20 | endif |
| 21 | |
| 22 | include $(BUILD_SYSTEM)/base_rules.mk |
| 23 | |
| 24 | $(LOCAL_BUILT_MODULE): $(LOCAL_SRC_FILES) |
| Dan Willemsen | 88b27b5 | 2016-02-05 14:11:51 -0800 | [diff] [blame] | 25 | @mkdir -p $(dir $@) |
| 26 | $(hide) cat > $@ $^ |
| Jeff Vander Stoep | 125c045 | 2015-12-11 15:22:00 -0800 | [diff] [blame] | 27 | |
| 28 | endif |