1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2022-11-09 12:21:53 -05:00
moby--moby/profiles/seccomp/fixtures/conditional_include.json
Sebastiaan van Stijn 56e7bc4b78
seccomp: remove dependency on oci package
rewrite the tests to use a minimal runtime-spec Spec instead

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-09-29 19:39:15 +02:00

23 lines
401 B
JSON

{
"defaultAction": "SCMP_ACT_ERRNO",
"syscalls": [
{
"names": ["chmod"],
"action": "SCMP_ACT_ALLOW"
},
{
"names": ["syslog"],
"action": "SCMP_ACT_ALLOW",
"includes": {
"caps": ["CAP_SYSLOG"]
}
},
{
"names": ["ptrace"],
"action": "SCMP_ACT_ALLOW",
"excludes": {
"caps": ["CAP_SYS_ADMIN"]
}
}
]
}