Merge "whitelist getrandom for arc4random usage"

7 years ago · 0d51135def
parent 6b1c64d32a 2dde5ecefd
commit 0d51135def
4 changed files with 4 additions and 0 deletions
--- a/services/mediacodec/seccomp_policy/mediacodec-arm.policy
+++ b/services/mediacodec/seccomp_policy/mediacodec-arm.policy
@ -52,6 +52,7 @@ sched_setscheduler: 1
 fstatat64: 1
 ugetrlimit: 1
 getdents64: 1
+getrandom: 1

 # for attaching to debuggerd on process crash
 sigaction: 1
--- a/services/mediaextractor/seccomp_policy/mediaextractor-arm.policy
+++ b/services/mediaextractor/seccomp_policy/mediaextractor-arm.policy
@ -39,6 +39,7 @@ getgid32: 1
 getegid32: 1
 getgroups32: 1
 nanosleep: 1
+getrandom: 1

 # for FileSource
 readlinkat: 1
--- a/services/mediaextractor/seccomp_policy/mediaextractor-arm64.policy
+++ b/services/mediaextractor/seccomp_policy/mediaextractor-arm64.policy
@ -28,6 +28,7 @@ exit_group: 1
 rt_sigreturn: 1
 getrlimit: 1
 nanosleep: 1
+getrandom: 1

 # for FileSource
 readlinkat: 1
--- a/services/mediaextractor/seccomp_policy/mediaextractor-x86.policy
+++ b/services/mediaextractor/seccomp_policy/mediaextractor-x86.policy
@ -37,6 +37,7 @@ getgid32: 1
 getegid32: 1
 getgroups32: 1
 nanosleep: 1
+getrandom: 1

 # for FileSource
 readlinkat: 1