tree 1421d0c4873c9f6614e57ea4284f643969612de4
parent 044ba1cb90cd9947141f87225a02a3cfd7e868f8
author A. Cody Schuffelen <schuffelen@google.com> 1706907650 -0800
committer Copybara-Service <copybara-worker@google.com> 1706907697 -0800

Add `DefaultAction(TraceAllSyscalls)` variant to `PolicyBuilder`

This helps write the kind of 'log, but allow' policy described in
[`notify.h`](https://github.com/google/sandboxed-api/blob/b9c84a1f75d282ff38ebed068bebe9960af9eb71/sandboxed_api/sandbox2/notify.h#L57) for all system calls not mentioned explicitly. One use case is writing a "permissive mode" runtime to give more information during development.

PiperOrigin-RevId: 603766051
Change-Id: I3c72f433a1e21c330b5dd9f1ede2faa570b75b09