Home | History | Annotate | Download | only in minijail 
      1 /*
      2  * Copyright (C) 2017 The Android Open Source Project
      3  *
      4  * Licensed under the Apache License, Version 2.0 (the "License");
      5  * you may not use this file except in compliance with the License.
      6  * You may obtain a copy of the License at
      7  *
      8  *      http://www.apache.org/licenses/LICENSE-2.0
      9  *
     10  * Unless required by applicable law or agreed to in writing, software
     11  * distributed under the License is distributed on an "AS IS" BASIS,
     12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
     13  * See the License for the specific language governing permissions and
     14  * limitations under the License.
     15  */
     16 
     17 #include "minijail.h"
     18 #include <unistd.h>
     19 #include <sys/types.h>
     20 #include <signal.h>
     21 
     22 #include <libminijail.h>
     23 #include <scoped_minijail.h>
     24 #include <android/log.h>
     25 
     26 #ifndef LOG_TAG
     27 #define LOG_TAG "minijail"
     28 #endif
     29 
     30 #define ALOGE(...) __android_log_print(ANDROID_LOG_ERROR  , LOG_TAG, __VA_ARGS__)
     31 
     32 
     33 /*
     34  * Class:     com_android_tv_tuner_exoplayer_ffmpeg_FfmpegDecoderService
     35  * Method:    nativeSetupMinijail
     36  * Signature: (I)V
     37  */
     38 JNIEXPORT void JNICALL
     39 Java_com_android_tv_tuner_exoplayer_ffmpeg_FfmpegDecoderService_nativeSetupMinijail
     40 (JNIEnv *, jobject, jint policyFd) {
     41     ScopedMinijail jail{minijail_new()};
     42     if (!jail) {
     43         ALOGE("Failed to create minijail");
     44     }
     45 
     46     minijail_no_new_privs(jail.get());
     47     minijail_log_seccomp_filter_failures(jail.get());
     48     minijail_use_seccomp_filter(jail.get());
     49     minijail_set_seccomp_filter_tsync(jail.get());
     50     // Transfer ownership of |policy_fd|.
     51     minijail_parse_seccomp_filters_from_fd(jail.get(), policyFd);
     52     minijail_enter(jail.get());
     53     close(policyFd);
     54 }
     55 
     56 /*
     57  * Class:     com_android_tv_tuner_exoplayer_ffmpeg_FfmpegDecoderService
     58  * Method:    nativeTestMinijail
     59  * Signature: ()V
     60  */
     61 JNIEXPORT void JNICALL
     62 Java_com_android_tv_tuner_exoplayer_ffmpeg_FfmpegDecoderService_nativeTestMinijail
     63 (JNIEnv *, jobject) {
     64     kill(getpid(), SIGUSR1);
     65 }