Add memfd related syscalls to allowed list

Required for migration of ashmem to memfd.

Bug: 113362644
Change-Id: I5c63ff130f67481deed5c8d975830463716c397c
Signed-off-by: Joel Fernandes <joelaf@google.com>

services/mediacodec/seccomp_policy/mediacodec-arm.policy

@@ -13,6 +13,8 @@ dup: 1
 ppoll: 1
 mmap2: 1
 getrandom: 1
+memfd_create: 1
+ftruncate64: 1
 
 # mremap: Ensure |flags| are (MREMAP_MAYMOVE | MREMAP_FIXED) TODO: Once minijail
 # parser support for '<' is in this needs to be modified to also prevent

services/mediacodec/seccomp_policy/mediaswcodec-arm.policy

@@ -21,6 +21,8 @@ dup: 1
 ppoll: 1
 mprotect: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
 mmap2: arg2 in ~PROT_EXEC || arg2 in ~PROT_WRITE
+memfd_create: 1
+ftruncate64: 1
 
 # mremap: Ensure |flags| are (MREMAP_MAYMOVE | MREMAP_FIXED) TODO: Once minijail
 # parser support for '<' is in this needs to be modified to also prevent

services/mediacodec/seccomp_policy/mediaswcodec-arm64.policy

@@ -26,6 +26,8 @@ getrlimit: 1
 fstat: 1
 newfstatat: 1
 fstatfs: 1
+memfd_create: 1
+ftruncate64: 1
 
 # mremap: Ensure |flags| are (MREMAP_MAYMOVE | MREMAP_FIXED) TODO: Once minijail
 # parser support for '<' is in this needs to be modified to also prevent