1{
2 "defaultAction": "SCMP_ACT_ERRNO",
3 "defaultErrnoRet": 6,
4 "architectures": [
5 "SCMP_ARCH_X86",
6 "SCMP_ARCH_X32",
7 "SCMP_ARCH_X86_64",
8 "SCMP_ARCH_AARCH64",
9 "SCMP_ARCH_ARM"
10 ],
11 "syscalls": [
12 {
13 "action": "SCMP_ACT_ALLOW",
14 "names": [
15 "accept",
16 "accept4",
17 "access",
18 "adjtimex",
19 "alarm",
20 "arch_prctl",
21 "bind",
22 "brk",
23 "capget",
24 "capset",
25 "chmod",
26 "chown",
27 "chown32",
28 "clock_adjtime",
29 "clock_adjtime64",
30 "clock_getres",
31 "clock_getres_time64",
32 "clock_gettime",
33 "clock_gettime64",
34 "clock_nanosleep",
35 "clock_nanosleep_time64",
36 "close",
37 "connect",
38 "copy_file_range",
39 "creat",
40 "dup",
41 "dup2",
42 "epoll_create",
43 "epoll_create1",
44 "epoll_ctl",
45 "epoll_ctl_old",
46 "epoll_pwait",
47 "epoll_wait",
48 "epoll_wait_old",
49 "eventfd",
50 "eventfd2",
51 "execve",
52 "execveat",
53 "exit",
54 "exit_group",
55 "faccessat",
56 "faccessat2",
57 "fadvise64",
58 "fadvise64_64",
59 "fallocate",
60 "fanotify_mark",
61 "fchdir",
62 "fchmod",
63 "fchmodat",
64 "fchown",
65 "fchown32",
66 "fchownat",
67 "fcntl",
68 "fcntl64",
69 "fdatasync",
70 "fgetxattr",
71 "flistxattr",
72 "flock",
73 "fork",
74 "fremovexattr",
75 "fsetxattr",
76 "fstat",
77 "fstat64",
78 "fstatat64",
79 "fstatfs",
80 "fstatfs64",
81 "fsync",
82 "ftruncate",
83 "ftruncate64",
84 "futex",
85 "futex_time64",
86 "futimesat",
87 "getcpu",
88 "getcwd",
89 "getdents",
90 "getdents64",
91 "getegid",
92 "getegid32",
93 "geteuid",
94 "geteuid32",
95 "getgid",
96 "getgid32",
97 "getgroups",
98 "getgroups32",
99 "getitimer",
100 "getpeername",
101 "getpgid",
102 "getpgrp",
103 "getpid",
104 "getppid",
105 "getpriority",
106 "getrandom",
107 "getresgid",
108 "getresgid32",
109 "getresuid",
110 "getresuid32",
111 "getrlimit",
112 "get_robust_list",
113 "getrusage",
114 "getsid",
115 "getsockname",
116 "getsockopt",
117 "get_thread_area",
118 "gettid",
119 "gettimeofday",
120 "getuid",
121 "getuid32",
122 "getxattr",
123 "inotify_add_watch",
124 "inotify_init",
125 "inotify_init1",
126 "inotify_rm_watch",
127 "io_cancel",
128 "ioctl",
129 "io_destroy",
130 "io_getevents",
131 "io_pgetevents",
132 "io_pgetevents_time64",
133 "ioprio_get",
134 "ioprio_set",
135 "io_setup",
136 "io_submit",
137 "io_uring_enter",
138 "io_uring_register",
139 "io_uring_setup",
140 "ipc",
141 "kill",
142 "lchown",
143 "lchown32",
144 "lgetxattr",
145 "link",
146 "linkat",
147 "listen",
148 "listxattr",
149 "llistxattr",
150 "_llseek",
151 "lremovexattr",
152 "lseek",
153 "lsetxattr",
154 "lstat",
155 "lstat64",
156 "madvise",
157 "membarrier",
158 "memfd_create",
159 "mincore",
160 "mkdir",
161 "mkdirat",
162 "mknod",
163 "mknodat",
164 "mlock",
165 "mlock2",
166 "mlockall",
167 "mmap",
168 "mmap2",
169 "modify_ldt",
170 "mprotect",
171 "mq_getsetattr",
172 "mq_notify",
173 "mq_open",
174 "mq_timedreceive",
175 "mq_timedreceive_time64",
176 "mq_timedsend",
177 "mq_timedsend_time64",
178 "mq_unlink",
179 "mremap",
180 "msgctl",
181 "msgget",
182 "msgrcv",
183 "msgsnd",
184 "msync",
185 "munlock",
186 "munlockall",
187 "munmap",
188 "nanosleep",
189 "newfstatat",
190 "_newselect",
191 "open",
192 "openat",
193 "openat2",
194 "pause",
195 "pidfd_open",
196 "pidfd_send_signal",
197 "pipe",
198 "pipe2",
199 "poll",
200 "ppoll",
201 "ppoll_time64",
202 "prctl",
203 "pread64",
204 "preadv",
205 "preadv2",
206 "prlimit64",
207 "pselect6",
208 "pselect6_time64",
209 "pwrite64",
210 "pwritev",
211 "pwritev2",
212 "read",
213 "readahead",
214 "readlink",
215 "readlinkat",
216 "readv",
217 "recv",
218 "recvfrom",
219 "recvmmsg",
220 "recvmmsg_time64",
221 "recvmsg",
222 "remap_file_pages",
223 "removexattr",
224 "rename",
225 "renameat",
226 "renameat2",
227 "restart_syscall",
228 "rmdir",
229 "rseq",
230 "rt_sigaction",
231 "rt_sigpending",
232 "rt_sigprocmask",
233 "rt_sigqueueinfo",
234 "rt_sigreturn",
235 "rt_sigsuspend",
236 "rt_sigtimedwait",
237 "rt_sigtimedwait_time64",
238 "rt_tgsigqueueinfo",
239 "sched_getaffinity",
240 "sched_getattr",
241 "sched_getparam",
242 "sched_get_priority_max",
243 "sched_get_priority_min",
244 "sched_getscheduler",
245 "sched_rr_get_interval",
246 "sched_rr_get_interval_time64",
247 "sched_setaffinity",
248 "sched_setattr",
249 "sched_setparam",
250 "sched_setscheduler",
251 "sched_yield",
252 "seccomp",
253 "select",
254 "semctl",
255 "semget",
256 "semop",
257 "semtimedop",
258 "semtimedop_time64",
259 "send",
260 "sendfile",
261 "sendfile64",
262 "sendmmsg",
263 "sendmsg",
264 "sendto",
265 "setfsgid",
266 "setfsgid32",
267 "setfsuid",
268 "setfsuid32",
269 "setgid",
270 "setgid32",
271 "setgroups",
272 "setgroups32",
273 "setitimer",
274 "setpgid",
275 "setpriority",
276 "setregid",
277 "setregid32",
278 "setresgid",
279 "setresgid32",
280 "setresuid",
281 "setresuid32",
282 "setreuid",
283 "setreuid32",
284 "setrlimit",
285 "set_robust_list",
286 "setsid",
287 "setsockopt",
288 "set_thread_area",
289 "set_tid_address",
290 "setuid",
291 "setuid32",
292 "setxattr",
293 "shmat",
294 "shmctl",
295 "shmdt",
296 "shmget",
297 "shutdown",
298 "sigaltstack",
299 "signalfd",
300 "signalfd4",
301 "sigprocmask",
302 "sigreturn",
303 "socketcall",
304 "socketpair",
305 "splice",
306 "stat",
307 "stat64",
308 "statfs",
309 "statfs64",
310 "statx",
311 "symlink",
312 "symlinkat",
313 "sync",
314 "sync_file_range",
315 "syncfs",
316 "sysinfo",
317 "tee",
318 "tgkill",
319 "time",
320 "timer_create",
321 "timer_delete",
322 "timer_getoverrun",
323 "timer_gettime",
324 "timer_gettime64",
325 "timer_settime",
326 "timer_settime64",
327 "timerfd_create",
328 "timerfd_gettime",
329 "timerfd_gettime64",
330 "timerfd_settime",
331 "timerfd_settime64",
332 "times",
333 "tkill",
334 "truncate",
335 "truncate64",
336 "ugetrlimit",
337 "umask",
338 "uname",
339 "unlink",
340 "unlinkat",
341 "utime",
342 "utimensat",
343 "utimensat_time64",
344 "utimes",
345 "vfork",
346 "vmsplice",
347 "wait4",
348 "waitid",
349 "waitpid",
350 "write",
351 "writev"
352 ]
353 }
354 ]
355}
356
View as plain text