24 lines
401 B
JSON
24 lines
401 B
JSON
{
|
|
"defaultAction": "SCMP_ACT_ERRNO",
|
|
"syscalls": [
|
|
{
|
|
"names": ["chmod"],
|
|
"action": "SCMP_ACT_ALLOW"
|
|
},
|
|
{
|
|
"names": ["syslog"],
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"includes": {
|
|
"caps": ["CAP_SYSLOG"]
|
|
}
|
|
},
|
|
{
|
|
"names": ["ptrace"],
|
|
"action": "SCMP_ACT_ALLOW",
|
|
"excludes": {
|
|
"caps": ["CAP_SYS_ADMIN"]
|
|
}
|
|
}
|
|
]
|
|
}
|