| Jeff Vander Stoep | c9ea211 | 2016-02-17 10:52:20 -0800 | [diff] [blame] | 1 | LOCAL_PATH := $(call my-dir) |
| 2 | |
| 3 | ifeq ($(TARGET_ARCH), $(filter $(TARGET_ARCH), arm arm64)) |
| 4 | include $(CLEAR_VARS) |
| 5 | LOCAL_MODULE := mediacodec-seccomp.policy |
| 6 | LOCAL_MODULE_CLASS := ETC |
| 7 | LOCAL_MODULE_PATH := $(TARGET_OUT)/etc/seccomp_policy |
| 8 | |
| 9 | # mediacodec runs in 32-bit combatibility mode. For 64 bit architectures, |
| 10 | # use the 32 bit policy |
| 11 | ifdef TARGET_2ND_ARCH |
| 12 | LOCAL_SRC_FILES := $(LOCAL_PATH)/seccomp_policy/mediacodec-seccomp-$(TARGET_2ND_ARCH).policy |
| 13 | else |
| 14 | LOCAL_SRC_FILES := $(LOCAL_PATH)/seccomp_policy/mediacodec-seccomp-$(TARGET_ARCH).policy |
| 15 | endif |
| 16 | |
| 17 | # allow device specific additions to the syscall whitelist |
| Alex Naidis | d405024 | 2016-10-29 16:18:15 +0200 | [diff] [blame] | 18 | LOCAL_SRC_FILES += $(wildcard $(foreach dir, $(BOARD_SECCOMP_POLICY), \ |
| 19 | $(dir)/mediacodec-seccomp.policy)) |
| Jeff Vander Stoep | c9ea211 | 2016-02-17 10:52:20 -0800 | [diff] [blame] | 20 | |
| 21 | include $(BUILD_SYSTEM)/base_rules.mk |
| 22 | |
| 23 | $(LOCAL_BUILT_MODULE): $(LOCAL_SRC_FILES) |
| 24 | @mkdir -p $(dir $@) |
| 25 | $(hide) cat > $@ $^ |
| 26 | |
| 27 | endif |