1LOCAL_PATH := $(call my-dir)
2
3ifeq ($(TARGET_ARCH), $(filter $(TARGET_ARCH), arm arm64 x86 x86_64))
4include $(CLEAR_VARS)
5LOCAL_MODULE := mediaextractor-seccomp.policy
6LOCAL_MODULE_CLASS := ETC
7LOCAL_MODULE_PATH := $(TARGET_OUT)/etc/seccomp_policy
8
9# mediaextractor runs in 32-bit combatibility mode. For 64 bit architectures,
10# use the 32 bit policy
11ifdef TARGET_2ND_ARCH
12    LOCAL_SRC_FILES := $(LOCAL_PATH)/seccomp_policy/mediaextractor-seccomp-$(TARGET_2ND_ARCH).policy
13else
14    LOCAL_SRC_FILES := $(LOCAL_PATH)/seccomp_policy/mediaextractor-seccomp-$(TARGET_ARCH).policy
15endif
16
17# allow device specific additions to the syscall whitelist
18ifneq (,$(wildcard $(BOARD_SECCOMP_POLICY)/mediaextractor-seccomp.policy))
19    LOCAL_SRC_FILES += $(BOARD_SECCOMP_POLICY)/mediaextractor-seccomp.policy
20endif
21
22include $(BUILD_SYSTEM)/base_rules.mk
23
24$(LOCAL_BUILT_MODULE): $(LOCAL_SRC_FILES)
25	@mkdir -p $(dir $@)
26	$(hide) cat > $@ $^
27
28endif
29