mirror of
https://github.com/moby/moby.git
synced 2022-11-09 12:21:53 -05:00
96896f2d0b
This adds the following new syscalls that are supported in libseccomp 2.3.0, including calls added up to kernel 4.5-rc4: mlock2 - same as mlock but with a flag copy_file_range - copy file contents, like splice but with reflink support. The following are not added, and mentioned in docs: userfaultfd - userspace page fault handling, mainly designed for process migration The following are not added, only apply to less common architectures: switch_endian membarrier breakpoint set_tls I plan to review the other architectures, some of which can now have seccomp enabled in the build as they are now supported. Signed-off-by: Justin Cormack <justin.cormack@docker.com>
1623 lines
No EOL
25 KiB
JSON
Executable file
1623 lines
No EOL
25 KiB
JSON
Executable file
{
|
|
"defaultAction": "SCMP_ACT_ERRNO",
|
|
"architectures": [
|
|
"SCMP_ARCH_X86_64",
|
|
"SCMP_ARCH_X86",
|
|
"SCMP_ARCH_X32"
|
|
],
|
|
"syscalls": [
|
|
{
|
|
"name": "accept",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "accept4",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "access",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "alarm",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "arch_prctl",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "bind",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "brk",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "capget",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "capset",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "chdir",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "chmod",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "chown",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "chown32",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "chroot",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "clock_getres",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "clock_gettime",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "clock_nanosleep",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "clone",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": [
|
|
{
|
|
"index": 0,
|
|
"value": 2080505856,
|
|
"valueTwo": 0,
|
|
"op": "SCMP_CMP_MASKED_EQ"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "close",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "connect",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "copy_file_range",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "creat",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "dup",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "dup2",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "dup3",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "epoll_create",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "epoll_create1",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "epoll_ctl",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "epoll_ctl_old",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "epoll_pwait",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "epoll_wait",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "epoll_wait_old",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "eventfd",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "eventfd2",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "execve",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "execveat",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "exit",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "exit_group",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "faccessat",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "fadvise64",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "fadvise64_64",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "fallocate",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "fanotify_init",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "fanotify_mark",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "fchdir",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "fchmod",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "fchmodat",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "fchown",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "fchown32",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "fchownat",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "fcntl",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "fcntl64",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "fdatasync",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "fgetxattr",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "flistxattr",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "flock",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "fork",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "fremovexattr",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "fsetxattr",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "fstat",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "fstat64",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "fstatat64",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "fstatfs",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "fstatfs64",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "fsync",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "ftruncate",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "ftruncate64",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "futex",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "futimesat",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "getcpu",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "getcwd",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "getdents",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "getdents64",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "getegid",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "getegid32",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "geteuid",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "geteuid32",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "getgid",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "getgid32",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "getgroups",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "getgroups32",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "getitimer",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "getpeername",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "getpgid",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "getpgrp",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "getpid",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "getppid",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "getpriority",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "getrandom",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "getresgid",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "getresgid32",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "getresuid",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "getresuid32",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "getrlimit",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "get_robust_list",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "getrusage",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "getsid",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "getsockname",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "getsockopt",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "get_thread_area",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "gettid",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "gettimeofday",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "getuid",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "getuid32",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "getxattr",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "inotify_add_watch",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "inotify_init",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "inotify_init1",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "inotify_rm_watch",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "io_cancel",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "ioctl",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "io_destroy",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "io_getevents",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "ioprio_get",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "ioprio_set",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "io_setup",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "io_submit",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "ipc",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "kill",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "lchown",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "lchown32",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "lgetxattr",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "link",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "linkat",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "listen",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "listxattr",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "llistxattr",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "_llseek",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "lremovexattr",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "lseek",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "lsetxattr",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "lstat",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "lstat64",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "madvise",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "memfd_create",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "mincore",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "mkdir",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "mkdirat",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "mknod",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "mknodat",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "mlock",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "mlock2",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "mlockall",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "mmap",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "mmap2",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "mprotect",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "mq_getsetattr",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "mq_notify",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "mq_open",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "mq_timedreceive",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "mq_timedsend",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "mq_unlink",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "mremap",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "msgctl",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "msgget",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "msgrcv",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "msgsnd",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "msync",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "munlock",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "munlockall",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "munmap",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "nanosleep",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "newfstatat",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "_newselect",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "open",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "openat",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "pause",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "personality",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": [
|
|
{
|
|
"index": 0,
|
|
"value": 0,
|
|
"valueTwo": 0,
|
|
"op": "SCMP_CMP_EQ"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "personality",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": [
|
|
{
|
|
"index": 0,
|
|
"value": 8,
|
|
"valueTwo": 0,
|
|
"op": "SCMP_CMP_EQ"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "personality",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": [
|
|
{
|
|
"index": 0,
|
|
"value": 4294967295,
|
|
"valueTwo": 0,
|
|
"op": "SCMP_CMP_EQ"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "pipe",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "pipe2",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "poll",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "ppoll",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "prctl",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "pread64",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "preadv",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "prlimit64",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "pselect6",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "pwrite64",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "pwritev",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "read",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "readahead",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "readlink",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "readlinkat",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "readv",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "recv",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "recvfrom",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "recvmmsg",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "recvmsg",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "remap_file_pages",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "removexattr",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "rename",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "renameat",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "renameat2",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "restart_syscall",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "rmdir",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "rt_sigaction",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "rt_sigpending",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "rt_sigprocmask",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "rt_sigqueueinfo",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "rt_sigreturn",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "rt_sigsuspend",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "rt_sigtimedwait",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "rt_tgsigqueueinfo",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "sched_getaffinity",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "sched_getattr",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "sched_getparam",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "sched_get_priority_max",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "sched_get_priority_min",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "sched_getscheduler",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "sched_rr_get_interval",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "sched_setaffinity",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "sched_setattr",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "sched_setparam",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "sched_setscheduler",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "sched_yield",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "seccomp",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "select",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "semctl",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "semget",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "semop",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "semtimedop",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "send",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "sendfile",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "sendfile64",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "sendmmsg",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "sendmsg",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "sendto",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "setdomainname",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "setfsgid",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "setfsgid32",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "setfsuid",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "setfsuid32",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "setgid",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "setgid32",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "setgroups",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "setgroups32",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "sethostname",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "setitimer",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "setpgid",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "setpriority",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "setregid",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "setregid32",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "setresgid",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "setresgid32",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "setresuid",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "setresuid32",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "setreuid",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "setreuid32",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "setrlimit",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "set_robust_list",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "setsid",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "setsockopt",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "set_thread_area",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "set_tid_address",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "setuid",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "setuid32",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "setxattr",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "shmat",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "shmctl",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "shmdt",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "shmget",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "shutdown",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "sigaltstack",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "signalfd",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "signalfd4",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "sigreturn",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "socket",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "socketpair",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "splice",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "stat",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "stat64",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "statfs",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "statfs64",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "symlink",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "symlinkat",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "sync",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "sync_file_range",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "syncfs",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "sysinfo",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "syslog",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "tee",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "tgkill",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "time",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "timer_create",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "timer_delete",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "timerfd_create",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "timerfd_gettime",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "timerfd_settime",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "timer_getoverrun",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "timer_gettime",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "timer_settime",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "times",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "tkill",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "truncate",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "truncate64",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "ugetrlimit",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "umask",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "uname",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "unlink",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "unlinkat",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "utime",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "utimensat",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "utimes",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "vfork",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "vhangup",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "vmsplice",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "wait4",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "waitid",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "waitpid",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "write",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "writev",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "modify_ldt",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "breakpoint",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "cacheflush",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "set_tls",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
}
|
|
]
|
|
} |