mirror of
https://github.com/moby/moby.git
synced 2022-11-09 12:21:53 -05:00
fb794166d9
Since commit "seccomp: Sync fields with runtime-spec fields"
(5d244675bd) we support to specify the
DefaultErrnoRet to be used.
Before that commit it was not specified and EPERM was used by default.
This commit keeps the same behaviour but just makes it explicit that the
default is EPERM.
Signed-off-by: Rodrigo Campos <rodrigo@kinvolk.io>
34 lines
779 B
JSON
34 lines
779 B
JSON
{
|
|
"defaultAction": "SCMP_ACT_ERRNO",
|
|
"defaultErrnoRet": 1,
|
|
"syscalls": [
|
|
{
|
|
"name": "clone",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": [
|
|
{
|
|
"index": 0,
|
|
"value": 2114060288,
|
|
"valueTwo": 0,
|
|
"op": "SCMP_CMP_MASKED_EQ"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "open",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "close",
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"args": []
|
|
},
|
|
{
|
|
"name": "syslog",
|
|
"action": "SCMP_ACT_ERRNO",
|
|
"errnoRet": 12345,
|
|
"args": []
|
|
}
|
|
]
|
|
}
|