tree 734e7e55da8c5aa667fd113c492fbcb8608f4793
parent d5583867c61867252d4a8d794704f9c2d40bbca8
author Paul Lawrence <paullawrence@google.com> 1477080782 -0700
committer Paul Lawrence <paullawrence@google.com> 1484071778 -0800

Enable seccomp in init with generated policy

Test: Ran script to test performance - https://b.corp.google.com/issues/32313202#comment3
      Saw no significant regression with this change on or off
      Removed chroot from SYSCALLS.TXT - chroot blocked
      Boot time appears reasonable
      Device boots with no SECCOMP blockings
      Measured per syscall time of 100ns
      Empirically counted <100,000 syscalls a second under heavy load

Bug: 32313202
Change-Id: Icfcfbcb72b2de1b38f1ad6a82e8ece3bd1c9e7ec