a7c27357b33d726a326a11e1e72f68e1546b994aSerge Hallyn# v2 allows comments after the second line, with '#' in first column,
a7c27357b33d726a326a11e1e72f68e1546b994aSerge Hallyn# blacklist will allow syscalls by default
a7c27357b33d726a326a11e1e72f68e1546b994aSerge Hallyn# if 'errno 0' was not appended to 'mknod' below, then the task would
a7c27357b33d726a326a11e1e72f68e1546b994aSerge Hallyn# simply be killed when it tried to mknod. 'errno 0' means do not allow
a7c27357b33d726a326a11e1e72f68e1546b994aSerge Hallyn# the container to mknod, but immediately return 0.