mirror of
https://github.com/moby/moby.git
synced 2022-11-09 12:21:53 -05:00
a1ec8551ab
All clone flags for namespace should be denied. Based-on-patch-by: Kenta Tada <Kenta.Tada@sony.com> Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
27 lines
608 B
JSON
Executable file
27 lines
608 B
JSON
Executable file
{
|
|
"defaultAction": "SCMP_ACT_ERRNO",
|
|
"syscalls": [
|
|
{
|
|
"name": "clone",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": [
|
|
{
|
|
"index": 0,
|
|
"value": 2114060288,
|
|
"valueTwo": 0,
|
|
"op": "SCMP_CMP_MASKED_EQ"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "open",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "close",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
}
|
|
]
|
|
}
|