etc/seccomp_policy/mediaextractor-seccomp.policy

   1 # Organized by frequency of systemcall - in descending order for
   2 # best performance.
   3 ioctl: 1
   4 futex: 1
   5 prctl: 1
   6 write: 1
   7 getpriority: 1
   8 mmap2: 1
   9 close: 1
  10 munmap: 1
  11 dup: 1
  12 mprotect: 1
  13 getuid32: 1
  14 setpriority: 1
  15 sigaltstack: 1
  16 openat: 1
  17 clone: 1
  18 read: 1
  19 clock_gettime: 1
  20 nanosleep: 1
  21 lseek: 1
  22 _llseek: 1
  23 writev: 1
  24 fstatat64: 1
  25 fstat64: 1
  26 pread64: 1
  27 readlinkat: 1
  28 restart_syscall: 1
  29 exit: 1
  30 exit_group: 1
  31 rt_sigreturn: 1
  32 faccessat: 1
  33 madvise: 1
  34 brk: 1
  35 sched_setscheduler: 1
  36 gettid: 1
  37 rt_sigprocmask: 1
  38 sched_yield: 1
  39 ugetrlimit: 1
  40 geteuid32: 1
  41 getgid32: 1
  42 getegid32: 1
  43 getgroups32: 1
  44 gettimeofday: 1
  45
  46 # for attaching to debuggerd on process crash
  47 sigaction: 1
  48 tgkill: 1
  49 socket: 1
  50 connect: 1
  51 fcntl64: 1
  52 rt_tgsigqueueinfo: 1