summaryrefslogtreecommitdiff
path: root/libc/SECCOMP_BLOCKLIST_COMMON.TXT
blob: 22c9844b3f3e4e9ffba9c32b078e2ea7f4b7500a (plain)
1
2
3
4
5
6
7
8
9
10
# This file is used to populate seccomp's allowlist policy in combination with SYSCALLS.TXT.
# Note that the resultant policy is applied only to zygote spawned processes.
#
# The final seccomp allowlist is SYSCALLS.TXT - SECCOMP_BLOCKLIST.TXT + SECCOMP_ALLOWLIST.TXT
# Any entry in the blocklist must be in the syscalls file and not be in the allowlist file
#
# This file is processed by a python script named genseccomp.py.

int     swapon(const char*, int) all
int     swapoff(const char*) all