The current sandbox code only whitelists V4L2 decoder devices that exist
at the time of sandbox creation. This effectively forbids any decoder
device to be used if it has been probed after Chromium has started.
Fix this by whitelisting all the /dev/video-dec[0..N] and
/dev/media-dec[0..N] devices. Doing so is safe because video-dec* and
media-dec* are symbolic links to the actual V4L2 devices that are
created by a udev rule matching only decoder devices, so we are not at
risk of giving access to an unexpected device. Besides, this is already
done for image processor and encoder devices (albeit only one device is
enabled this way).
Bug: 948147
Bug: 1000149
Test: Video decoding working on Kukui.
Change-Id: I4679dd102b20f4baf958f2b4c0e91b0556c28397
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1782178
Commit-Queue: Kenneth Russell <kbr@chromium.org>
Reviewed-by: Kenneth Russell <kbr@chromium.org>
Auto-Submit: Alexandre Courbot <acourbot@chromium.org>
Cr-Commit-Position: refs/heads/master@{#692704}
d1b9852859