# This file is used to populate seccomp's global whitelist policy in
# combination with SYSCALLS.TXT, SECCOMP_BLACKLIST.TXT and
# SECCOMP_WHITELIST.TXT.  Unlike the policy used in normal operation this
# policy is applied globally during the early stage of init, if global seccomp
# is enabled.
#
# See the description at the top of SYSCALLS.TXT for an explanation of the
# format of the entries in this file.
#
# This file is processed by a python script named genseccomp.py.

# syscalls needed to boot android
int swapon(const char*, int) all
long keyctl(int, ...) all
key_serial_t add_key(const char*, const char*, const void*, size_t, key_serial_t) all

# b/62715671
int finit_module(int, const char*, int) all