diff --git a/mediacodec.policy b/mediacodec.policy
new file mode 100644
index 0000000..7bf6b0d
--- /dev/null
+++ b/mediacodec.policy
@@ -0,0 +1,3 @@
+# fix for mesa / gallium3D dri
+uname: 1
+sysinfo: 1
diff --git a/redroid.mk b/redroid.mk
index 1a9f095..c25214d 100644
--- a/redroid.mk
+++ b/redroid.mk
@@ -118,6 +118,7 @@ PRODUCT_COPY_FILES += \
     frameworks/native/data/etc/android.hardware.ethernet.xml:$(TARGET_COPY_OUT_VENDOR)/etc/permissions/android.hardware.ethernet.xml \
     $(LOCAL_PATH)/gpu_config.sh:$(TARGET_COPY_OUT_VENDOR)/bin/gpu_config.sh \
     $(LOCAL_PATH)/init.redroid.rc:$(TARGET_COPY_OUT_VENDOR)/etc/init/init.redroid.rc \
+    $(LOCAL_PATH)/mediacodec.policy:$(TARGET_COPY_OUT_VENDOR)/etc/seccomp_policy/mediacodec.policy \
 
 
 $(call inherit-product, frameworks/native/build/phone-xhdpi-6144-dalvik-heap.mk)