1LOCAL_PATH := $(call my-dir) 2 3ifeq ($(TARGET_ARCH), $(filter $(TARGET_ARCH), arm arm64 x86 x86_64)) 4include $(CLEAR_VARS) 5LOCAL_MODULE := mediaextractor-seccomp.policy 6LOCAL_MODULE_CLASS := ETC 7LOCAL_MODULE_PATH := $(TARGET_OUT)/etc/seccomp_policy 8 9# mediaextractor runs in 32-bit combatibility mode. For 64 bit architectures, 10# use the 32 bit policy 11ifdef TARGET_2ND_ARCH 12 LOCAL_SRC_FILES := $(LOCAL_PATH)/seccomp_policy/mediaextractor-seccomp-$(TARGET_2ND_ARCH).policy 13else 14 LOCAL_SRC_FILES := $(LOCAL_PATH)/seccomp_policy/mediaextractor-seccomp-$(TARGET_ARCH).policy 15endif 16 17# allow device specific additions to the syscall whitelist 18ifneq (,$(wildcard $(BOARD_SECCOMP_POLICY)/mediaextractor-seccomp.policy)) 19 LOCAL_SRC_FILES += $(BOARD_SECCOMP_POLICY)/mediaextractor-seccomp.policy 20endif 21 22include $(BUILD_SYSTEM)/base_rules.mk 23 24$(LOCAL_BUILT_MODULE): $(LOCAL_SRC_FILES) 25 @mkdir -p $(dir $@) 26 $(hide) cat > $@ $^ 27 28endif 29