diff --git a/services/mediacodec/seccomp_policy/mediacodec-arm.policy b/services/mediacodec/seccomp_policy/mediacodec-arm.policy index 73857f8746..8e1fc7784d 100644 --- a/services/mediacodec/seccomp_policy/mediacodec-arm.policy +++ b/services/mediacodec/seccomp_policy/mediacodec-arm.policy @@ -52,6 +52,7 @@ sched_setscheduler: 1 fstatat64: 1 ugetrlimit: 1 getdents64: 1 +getrandom: 1 # for attaching to debuggerd on process crash sigaction: 1 diff --git a/services/mediaextractor/seccomp_policy/mediaextractor-arm.policy b/services/mediaextractor/seccomp_policy/mediaextractor-arm.policy index e06ac8c4e8..4fa69d72f9 100644 --- a/services/mediaextractor/seccomp_policy/mediaextractor-arm.policy +++ b/services/mediaextractor/seccomp_policy/mediaextractor-arm.policy @@ -39,6 +39,7 @@ getgid32: 1 getegid32: 1 getgroups32: 1 nanosleep: 1 +getrandom: 1 # for FileSource readlinkat: 1 diff --git a/services/mediaextractor/seccomp_policy/mediaextractor-arm64.policy b/services/mediaextractor/seccomp_policy/mediaextractor-arm64.policy index 7c2a790e9c..d1278a977d 100644 --- a/services/mediaextractor/seccomp_policy/mediaextractor-arm64.policy +++ b/services/mediaextractor/seccomp_policy/mediaextractor-arm64.policy @@ -28,6 +28,7 @@ exit_group: 1 rt_sigreturn: 1 getrlimit: 1 nanosleep: 1 +getrandom: 1 # for FileSource readlinkat: 1 diff --git a/services/mediaextractor/seccomp_policy/mediaextractor-x86.policy b/services/mediaextractor/seccomp_policy/mediaextractor-x86.policy index cdff4dba07..3b37f92fbb 100644 --- a/services/mediaextractor/seccomp_policy/mediaextractor-x86.policy +++ b/services/mediaextractor/seccomp_policy/mediaextractor-x86.policy @@ -37,6 +37,7 @@ getgid32: 1 getegid32: 1 getgroups32: 1 nanosleep: 1 +getrandom: 1 # for FileSource readlinkat: 1