xref: /aosp_15_r20/bionic/libc/SECCOMP_BLOCKLIST_COMMON.TXT (revision 8d67ca893c1523eb926b9080dbe4e2ffd2a27ba1)
1*8d67ca89SAndroid Build Coastguard Worker# This file is used to populate seccomp's allowlist policy in combination with SYSCALLS.TXT.
2*8d67ca89SAndroid Build Coastguard Worker# Note that the resultant policy is applied only to zygote spawned processes.
3*8d67ca89SAndroid Build Coastguard Worker#
4*8d67ca89SAndroid Build Coastguard Worker# The final seccomp allowlist is SYSCALLS.TXT - SECCOMP_BLOCKLIST.TXT + SECCOMP_ALLOWLIST.TXT
5*8d67ca89SAndroid Build Coastguard Worker# Any entry in the blocklist must be in the syscalls file and not be in the allowlist file
6*8d67ca89SAndroid Build Coastguard Worker#
7*8d67ca89SAndroid Build Coastguard Worker# This file is processed by a python script named genseccomp.py.
8*8d67ca89SAndroid Build Coastguard Worker
9*8d67ca89SAndroid Build Coastguard Workerint     swapon(const char*, int) all
10*8d67ca89SAndroid Build Coastguard Workerint     swapoff(const char*) all
11