1# This file is used to populate seccomp's global whitelist policy in
2# combination with SYSCALLS.TXT, SECCOMP_BLACKLIST.TXT and
3# SECCOMP_WHITELIST.TXT.  Unlike the policy used in normal operation this
4# policy is applied globally during the early stage of init, if global seccomp
5# is enabled.
6#
7# See the description at the top of SYSCALLS.TXT for an explanation of the
8# format of the entries in this file.
9#
10# This file is processed by a python script named genseccomp.py.
11
12# syscalls needed to boot android
13int swapon(const char*, int) all
14long keyctl(int, ...) all
15key_serial_t add_key(const char*, const char*, const void*, size_t, key_serial_t) all
16
17# b/62715671
18int finit_module(int, const char*, int) all
19