add service defs for FFMPEG

Author: hephaex

ffmpeg/policy.yml

@@ -0,0 +1,27 @@
+whitelist_paths:
+  OP_OPEN: ["*"]
+  OP_ACCESS: ["*"]
+  OP_EXEC: ["*"]
+  OP_STAT: ["*"]
+  OP_CHMOD: ["/home/work/*", "/tmp/*"]
+exec_allowance: -1
+fork_allowance: -1
+max_child_procs: 32
+extra_envs: []
+preserved_env_keys: [
+  "HOME", "PATH", "LANG",
+  "USER", "SHELL", "TERM",
+  "LD_LIBRARY_PATH",
+  "LD_PRELOAD",
+  # Python-specific
+  "PYTHONPATH",
+  "PYTHONUNBUFFERED",
+  "MPLCONFIGDIR",
+  "OPENBLAS_NUM_THREADS",
+]
+
+diff_to_default: true
+
+# Following syscalls are blindly allowed.
+# IMPORTANT: ptrace MUST NOT be included!
+allowed_syscalls:

ffmpeg/service-defs/ffmpeg.json

@@ -1,9 +1,7 @@
 {
     "command": [
-        "{runtime_path}", "-m", "ffmpeg",
+        "/usr/local/bin/ffmpeg",
 	"-stats",
-	"-i", "{[0]}",
-	"-vcodec hevc_nvenc"
-	"{[0]}
+	"-vcodec","hevc_nvenc"
     ]
 }