1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
|
{
"defaultAction": "SCMP_ACT_KILL_PROCESS",
"syscalls": [
{
"names": [
"accept",
"accept4",
"access",
"arm_fadvise64_64",
"bind",
"brk",
"clock_gettime",
"clock_gettime64",
"clone",
"close",
"connect",
"epoll_create1",
"epoll_ctl",
"epoll_pwait",
"exit",
"exit_group",
"faccessat",
"fadvise64",
"fadvise64_64",
"fallocate",
"fchmod",
"fcntl",
"fcntl64",
"fstat",
"fstat64",
"fsync",
"futex",
"getdents64",
"getegid32",
"getenv",
"geteuid32",
"getgid32",
"getpeername",
"getpid",
"getrandom",
"getsockname",
"getsockopt",
"getuid",
"getuid32",
"inotify_add_watch",
"inotify_init1",
"inotify_rm_watch",
"ioctl",
"listen",
"_llseek",
"lseek",
"madvise",
"membarrier",
"mkdir",
"mkdirat",
"mmap",
"mmap2",
"mprotect",
"mremap",
"munmap",
"nanosleep",
"newfstatat",
"_newselect",
"open",
"openat",
"pipe",
"pipe2",
"poll",
"ppoll",
"pread64",
"prlimit64",
"pselect6",
"pwrite64",
"quotactl",
"read",
"readlink",
"readlinkat",
"readv",
"recvfrom",
"rename",
"renameat",
"rmdir",
"rt_sigaction",
"rt_sigprocmask",
"rt_sigreturn",
"select",
"sendto",
"setsockopt",
"shutdown",
"sigreturn",
"socket",
"socketpair",
"stat",
"stat64",
"statfs",
"statfs64",
"statx",
"umask",
"uname",
"unlink",
"unlinkat",
"write",
"writev"
],
"action": "SCMP_ACT_ALLOW"
}
]
}
|