blob: 30a80c94593a4e3ac8847227b07b53ec9bb10a0b [file] [log] [blame]
Jess Frazelle0431b7b2016-05-23 13:50:22 -07001package main
2
3const (
4 seccompProfile = `{
5 "defaultAction": "SCMP_ACT_ERRNO",
6 "syscalls": [
7 {
Jess Frazelle0431b7b2016-05-23 13:50:22 -07008 "name": "bind",
9 "action": "SCMP_ACT_ALLOW",
10 "args": []
11 },
12 {
Jess Frazelle8efc0a02017-01-13 18:33:24 -080013 "name": "mprotect",
14 "action": "SCMP_ACT_ALLOW",
15 "args": []
16 },
17 {
Jess Frazelle0431b7b2016-05-23 13:50:22 -070018 "name": "brk",
19 "action": "SCMP_ACT_ALLOW",
20 "args": []
21 },
22 {
23 "name": "capget",
24 "action": "SCMP_ACT_ALLOW",
25 "args": []
26 },
27 {
28 "name": "capset",
29 "action": "SCMP_ACT_ALLOW",
30 "args": []
31 },
32 {
33 "name": "chdir",
34 "action": "SCMP_ACT_ALLOW",
35 "args": []
36 },
37 {
38 "name": "chmod",
39 "action": "SCMP_ACT_ALLOW",
40 "args": []
41 },
42 {
43 "name": "clock_getres",
44 "action": "SCMP_ACT_ALLOW",
45 "args": []
46 },
47 {
48 "name": "clock_gettime",
49 "action": "SCMP_ACT_ALLOW",
50 "args": []
51 },
52 {
Jess Frazelle0431b7b2016-05-23 13:50:22 -070053 "name": "close",
54 "action": "SCMP_ACT_ALLOW",
55 "args": []
56 },
57 {
58 "name": "connect",
59 "action": "SCMP_ACT_ALLOW",
60 "args": []
61 },
62 {
63 "name": "copy_file_range",
64 "action": "SCMP_ACT_ALLOW",
65 "args": []
66 },
67 {
68 "name": "creat",
69 "action": "SCMP_ACT_ALLOW",
70 "args": []
71 },
72 {
73 "name": "dup",
74 "action": "SCMP_ACT_ALLOW",
75 "args": []
76 },
77 {
78 "name": "dup2",
79 "action": "SCMP_ACT_ALLOW",
80 "args": []
81 },
82 {
83 "name": "dup3",
84 "action": "SCMP_ACT_ALLOW",
85 "args": []
86 },
87 {
88 "name": "epoll_create",
89 "action": "SCMP_ACT_ALLOW",
90 "args": []
91 },
92 {
93 "name": "epoll_create1",
94 "action": "SCMP_ACT_ALLOW",
95 "args": []
96 },
Jess Frazelle603090f2017-01-13 18:22:27 -080097 {
Jess Frazelle0431b7b2016-05-23 13:50:22 -070098 "name": "eventfd",
99 "action": "SCMP_ACT_ALLOW",
100 "args": []
101 },
102 {
103 "name": "eventfd2",
104 "action": "SCMP_ACT_ALLOW",
105 "args": []
106 },
107 {
108 "name": "execve",
109 "action": "SCMP_ACT_ALLOW",
110 "args": []
111 },
112 {
113 "name": "execveat",
114 "action": "SCMP_ACT_ALLOW",
115 "args": []
116 },
117 {
118 "name": "exit",
119 "action": "SCMP_ACT_ALLOW",
120 "args": []
121 },
122 {
123 "name": "exit_group",
124 "action": "SCMP_ACT_ALLOW",
125 "args": []
126 },
127 {
128 "name": "faccessat",
129 "action": "SCMP_ACT_ALLOW",
130 "args": []
131 },
132 {
133 "name": "fadvise64",
134 "action": "SCMP_ACT_ALLOW",
135 "args": []
136 },
137 {
138 "name": "fadvise64_64",
139 "action": "SCMP_ACT_ALLOW",
140 "args": []
141 },
142 {
143 "name": "fallocate",
144 "action": "SCMP_ACT_ALLOW",
145 "args": []
146 },
147 {
148 "name": "fanotify_mark",
149 "action": "SCMP_ACT_ALLOW",
150 "args": []
151 },
152 {
153 "name": "fchdir",
154 "action": "SCMP_ACT_ALLOW",
155 "args": []
156 },
157 {
158 "name": "fchmod",
159 "action": "SCMP_ACT_ALLOW",
160 "args": []
161 },
162 {
163 "name": "fchmodat",
164 "action": "SCMP_ACT_ALLOW",
165 "args": []
166 },
167 {
168 "name": "fcntl",
169 "action": "SCMP_ACT_ALLOW",
170 "args": []
171 },
172 {
173 "name": "fcntl64",
174 "action": "SCMP_ACT_ALLOW",
175 "args": []
176 },
177 {
178 "name": "fdatasync",
179 "action": "SCMP_ACT_ALLOW",
180 "args": []
181 },
182 {
183 "name": "fgetxattr",
184 "action": "SCMP_ACT_ALLOW",
185 "args": []
186 },
187 {
188 "name": "flistxattr",
189 "action": "SCMP_ACT_ALLOW",
190 "args": []
191 },
192 {
193 "name": "flock",
194 "action": "SCMP_ACT_ALLOW",
195 "args": []
196 },
197 {
198 "name": "fork",
199 "action": "SCMP_ACT_ALLOW",
200 "args": []
201 },
202 {
203 "name": "fremovexattr",
204 "action": "SCMP_ACT_ALLOW",
205 "args": []
206 },
207 {
208 "name": "fsetxattr",
209 "action": "SCMP_ACT_ALLOW",
210 "args": []
211 },
212 {
213 "name": "fstat",
214 "action": "SCMP_ACT_ALLOW",
215 "args": []
216 },
217 {
218 "name": "fstat64",
219 "action": "SCMP_ACT_ALLOW",
220 "args": []
221 },
222 {
223 "name": "fstatat64",
224 "action": "SCMP_ACT_ALLOW",
225 "args": []
226 },
227 {
228 "name": "fstatfs",
229 "action": "SCMP_ACT_ALLOW",
230 "args": []
231 },
232 {
233 "name": "fstatfs64",
234 "action": "SCMP_ACT_ALLOW",
235 "args": []
236 },
237 {
238 "name": "fsync",
239 "action": "SCMP_ACT_ALLOW",
240 "args": []
241 },
242 {
243 "name": "ftruncate",
244 "action": "SCMP_ACT_ALLOW",
245 "args": []
246 },
247 {
248 "name": "ftruncate64",
249 "action": "SCMP_ACT_ALLOW",
250 "args": []
251 },
252 {
253 "name": "futex",
254 "action": "SCMP_ACT_ALLOW",
255 "args": []
256 },
257 {
258 "name": "futimesat",
259 "action": "SCMP_ACT_ALLOW",
260 "args": []
261 },
262 {
263 "name": "getcpu",
264 "action": "SCMP_ACT_ALLOW",
265 "args": []
266 },
267 {
268 "name": "getcwd",
269 "action": "SCMP_ACT_ALLOW",
270 "args": []
271 },
272 {
273 "name": "getdents",
274 "action": "SCMP_ACT_ALLOW",
275 "args": []
276 },
277 {
278 "name": "getdents64",
279 "action": "SCMP_ACT_ALLOW",
280 "args": []
281 },
282 {
283 "name": "getegid",
284 "action": "SCMP_ACT_ALLOW",
285 "args": []
286 },
287 {
288 "name": "getegid32",
289 "action": "SCMP_ACT_ALLOW",
290 "args": []
291 },
292 {
293 "name": "geteuid",
294 "action": "SCMP_ACT_ALLOW",
295 "args": []
296 },
297 {
298 "name": "geteuid32",
299 "action": "SCMP_ACT_ALLOW",
300 "args": []
301 },
302 {
303 "name": "getgid",
304 "action": "SCMP_ACT_ALLOW",
305 "args": []
306 },
307 {
308 "name": "getgid32",
309 "action": "SCMP_ACT_ALLOW",
310 "args": []
311 },
312 {
313 "name": "getgroups",
314 "action": "SCMP_ACT_ALLOW",
315 "args": []
316 },
317 {
318 "name": "getgroups32",
319 "action": "SCMP_ACT_ALLOW",
320 "args": []
321 },
322 {
323 "name": "getitimer",
324 "action": "SCMP_ACT_ALLOW",
325 "args": []
326 },
327 {
328 "name": "getpeername",
329 "action": "SCMP_ACT_ALLOW",
330 "args": []
331 },
332 {
333 "name": "getpgid",
334 "action": "SCMP_ACT_ALLOW",
335 "args": []
336 },
337 {
338 "name": "getpgrp",
339 "action": "SCMP_ACT_ALLOW",
340 "args": []
341 },
342 {
343 "name": "getpid",
344 "action": "SCMP_ACT_ALLOW",
345 "args": []
346 },
347 {
348 "name": "getppid",
349 "action": "SCMP_ACT_ALLOW",
350 "args": []
351 },
352 {
353 "name": "getpriority",
354 "action": "SCMP_ACT_ALLOW",
355 "args": []
356 },
357 {
358 "name": "getrandom",
359 "action": "SCMP_ACT_ALLOW",
360 "args": []
361 },
362 {
363 "name": "getresgid",
364 "action": "SCMP_ACT_ALLOW",
365 "args": []
366 },
367 {
368 "name": "getresgid32",
369 "action": "SCMP_ACT_ALLOW",
370 "args": []
371 },
372 {
373 "name": "getresuid",
374 "action": "SCMP_ACT_ALLOW",
375 "args": []
376 },
377 {
378 "name": "getresuid32",
379 "action": "SCMP_ACT_ALLOW",
380 "args": []
381 },
382 {
383 "name": "getrlimit",
384 "action": "SCMP_ACT_ALLOW",
385 "args": []
386 },
387 {
388 "name": "get_robust_list",
389 "action": "SCMP_ACT_ALLOW",
390 "args": []
391 },
392 {
393 "name": "getrusage",
394 "action": "SCMP_ACT_ALLOW",
395 "args": []
396 },
397 {
398 "name": "getsid",
399 "action": "SCMP_ACT_ALLOW",
400 "args": []
401 },
402 {
403 "name": "getsockname",
404 "action": "SCMP_ACT_ALLOW",
405 "args": []
406 },
407 {
408 "name": "getsockopt",
409 "action": "SCMP_ACT_ALLOW",
410 "args": []
411 },
412 {
413 "name": "get_thread_area",
414 "action": "SCMP_ACT_ALLOW",
415 "args": []
416 },
417 {
418 "name": "gettid",
419 "action": "SCMP_ACT_ALLOW",
420 "args": []
421 },
422 {
423 "name": "gettimeofday",
424 "action": "SCMP_ACT_ALLOW",
425 "args": []
426 },
427 {
428 "name": "getuid",
429 "action": "SCMP_ACT_ALLOW",
430 "args": []
431 },
432 {
433 "name": "getuid32",
434 "action": "SCMP_ACT_ALLOW",
435 "args": []
436 },
437 {
438 "name": "getxattr",
439 "action": "SCMP_ACT_ALLOW",
440 "args": []
441 },
442 {
Jess Frazelle0431b7b2016-05-23 13:50:22 -0700443 "name": "io_cancel",
444 "action": "SCMP_ACT_ALLOW",
445 "args": []
446 },
447 {
448 "name": "ioctl",
449 "action": "SCMP_ACT_ALLOW",
450 "args": []
451 },
452 {
453 "name": "io_destroy",
454 "action": "SCMP_ACT_ALLOW",
455 "args": []
456 },
457 {
458 "name": "io_getevents",
459 "action": "SCMP_ACT_ALLOW",
460 "args": []
461 },
462 {
463 "name": "ioprio_get",
464 "action": "SCMP_ACT_ALLOW",
465 "args": []
466 },
467 {
468 "name": "ioprio_set",
469 "action": "SCMP_ACT_ALLOW",
470 "args": []
471 },
472 {
473 "name": "io_setup",
474 "action": "SCMP_ACT_ALLOW",
475 "args": []
476 },
477 {
478 "name": "io_submit",
479 "action": "SCMP_ACT_ALLOW",
480 "args": []
481 },
482 {
483 "name": "ipc",
484 "action": "SCMP_ACT_ALLOW",
485 "args": []
486 },
487 {
488 "name": "kill",
489 "action": "SCMP_ACT_ALLOW",
490 "args": []
491 },
492 {
493 "name": "lgetxattr",
494 "action": "SCMP_ACT_ALLOW",
495 "args": []
496 },
497 {
498 "name": "link",
499 "action": "SCMP_ACT_ALLOW",
500 "args": []
501 },
502 {
503 "name": "linkat",
504 "action": "SCMP_ACT_ALLOW",
505 "args": []
506 },
507 {
508 "name": "listen",
509 "action": "SCMP_ACT_ALLOW",
510 "args": []
511 },
512 {
513 "name": "listxattr",
514 "action": "SCMP_ACT_ALLOW",
515 "args": []
516 },
517 {
518 "name": "llistxattr",
519 "action": "SCMP_ACT_ALLOW",
520 "args": []
521 },
522 {
523 "name": "_llseek",
524 "action": "SCMP_ACT_ALLOW",
525 "args": []
526 },
527 {
528 "name": "lremovexattr",
529 "action": "SCMP_ACT_ALLOW",
530 "args": []
531 },
532 {
533 "name": "lseek",
534 "action": "SCMP_ACT_ALLOW",
535 "args": []
536 },
537 {
538 "name": "lsetxattr",
539 "action": "SCMP_ACT_ALLOW",
540 "args": []
541 },
542 {
543 "name": "lstat",
544 "action": "SCMP_ACT_ALLOW",
545 "args": []
546 },
547 {
548 "name": "lstat64",
549 "action": "SCMP_ACT_ALLOW",
550 "args": []
551 },
552 {
Jess Frazelle0431b7b2016-05-23 13:50:22 -0700553 "name": "mkdir",
554 "action": "SCMP_ACT_ALLOW",
555 "args": []
556 },
557 {
558 "name": "mkdirat",
559 "action": "SCMP_ACT_ALLOW",
560 "args": []
561 },
562 {
563 "name": "mknod",
564 "action": "SCMP_ACT_ALLOW",
565 "args": []
566 },
567 {
568 "name": "mknodat",
569 "action": "SCMP_ACT_ALLOW",
570 "args": []
571 },
572 {
573 "name": "mmap",
574 "action": "SCMP_ACT_ALLOW",
575 "args": []
576 },
577 {
578 "name": "mmap2",
579 "action": "SCMP_ACT_ALLOW",
580 "args": []
581 },
582 {
Jess Frazelle0431b7b2016-05-23 13:50:22 -0700583 "name": "_newselect",
584 "action": "SCMP_ACT_ALLOW",
585 "args": []
586 },
587 {
588 "name": "open",
589 "action": "SCMP_ACT_ALLOW",
590 "args": []
591 },
592 {
593 "name": "openat",
594 "action": "SCMP_ACT_ALLOW",
595 "args": []
596 },
597 {
598 "name": "pause",
599 "action": "SCMP_ACT_ALLOW",
600 "args": []
601 },
602 {
603 "name": "personality",
604 "action": "SCMP_ACT_ALLOW",
605 "args": [
606 {
607 "index": 0,
608 "value": 0,
609 "valueTwo": 0,
610 "op": "SCMP_CMP_EQ"
611 }
612 ]
613 },
614 {
615 "name": "personality",
616 "action": "SCMP_ACT_ALLOW",
617 "args": [
618 {
619 "index": 0,
620 "value": 8,
621 "valueTwo": 0,
622 "op": "SCMP_CMP_EQ"
623 }
624 ]
625 },
626 {
627 "name": "personality",
628 "action": "SCMP_ACT_ALLOW",
629 "args": [
630 {
631 "index": 0,
632 "value": 4294967295,
633 "valueTwo": 0,
634 "op": "SCMP_CMP_EQ"
635 }
636 ]
637 },
638 {
639 "name": "pipe",
640 "action": "SCMP_ACT_ALLOW",
641 "args": []
642 },
643 {
644 "name": "pipe2",
645 "action": "SCMP_ACT_ALLOW",
646 "args": []
647 },
648 {
649 "name": "poll",
650 "action": "SCMP_ACT_ALLOW",
651 "args": []
652 },
653 {
654 "name": "ppoll",
655 "action": "SCMP_ACT_ALLOW",
656 "args": []
657 },
658 {
659 "name": "prctl",
660 "action": "SCMP_ACT_ALLOW",
661 "args": []
662 },
663 {
664 "name": "pread64",
665 "action": "SCMP_ACT_ALLOW",
666 "args": []
667 },
668 {
669 "name": "preadv",
670 "action": "SCMP_ACT_ALLOW",
671 "args": []
672 },
673 {
674 "name": "prlimit64",
675 "action": "SCMP_ACT_ALLOW",
676 "args": []
677 },
678 {
679 "name": "pselect6",
680 "action": "SCMP_ACT_ALLOW",
681 "args": []
682 },
683 {
684 "name": "pwrite64",
685 "action": "SCMP_ACT_ALLOW",
686 "args": []
687 },
688 {
689 "name": "pwritev",
690 "action": "SCMP_ACT_ALLOW",
691 "args": []
692 },
693 {
694 "name": "read",
695 "action": "SCMP_ACT_ALLOW",
696 "args": []
697 },
698 {
699 "name": "readahead",
700 "action": "SCMP_ACT_ALLOW",
701 "args": []
702 },
703 {
704 "name": "readlink",
705 "action": "SCMP_ACT_ALLOW",
706 "args": []
707 },
708 {
709 "name": "readlinkat",
710 "action": "SCMP_ACT_ALLOW",
711 "args": []
712 },
713 {
714 "name": "readv",
715 "action": "SCMP_ACT_ALLOW",
716 "args": []
717 },
718 {
719 "name": "recv",
720 "action": "SCMP_ACT_ALLOW",
721 "args": []
722 },
723 {
724 "name": "recvfrom",
725 "action": "SCMP_ACT_ALLOW",
726 "args": []
727 },
728 {
729 "name": "recvmmsg",
730 "action": "SCMP_ACT_ALLOW",
731 "args": []
732 },
733 {
734 "name": "recvmsg",
735 "action": "SCMP_ACT_ALLOW",
736 "args": []
737 },
738 {
739 "name": "remap_file_pages",
740 "action": "SCMP_ACT_ALLOW",
741 "args": []
742 },
743 {
744 "name": "removexattr",
745 "action": "SCMP_ACT_ALLOW",
746 "args": []
747 },
748 {
749 "name": "rename",
750 "action": "SCMP_ACT_ALLOW",
751 "args": []
752 },
753 {
754 "name": "renameat",
755 "action": "SCMP_ACT_ALLOW",
756 "args": []
757 },
758 {
759 "name": "renameat2",
760 "action": "SCMP_ACT_ALLOW",
761 "args": []
762 },
763 {
764 "name": "restart_syscall",
765 "action": "SCMP_ACT_ALLOW",
766 "args": []
767 },
768 {
769 "name": "rmdir",
770 "action": "SCMP_ACT_ALLOW",
771 "args": []
772 },
773 {
774 "name": "rt_sigaction",
775 "action": "SCMP_ACT_ALLOW",
776 "args": []
777 },
778 {
779 "name": "rt_sigpending",
780 "action": "SCMP_ACT_ALLOW",
781 "args": []
782 },
783 {
784 "name": "rt_sigprocmask",
785 "action": "SCMP_ACT_ALLOW",
786 "args": []
787 },
788 {
789 "name": "rt_sigqueueinfo",
790 "action": "SCMP_ACT_ALLOW",
791 "args": []
792 },
793 {
794 "name": "rt_sigreturn",
795 "action": "SCMP_ACT_ALLOW",
796 "args": []
797 },
798 {
799 "name": "rt_sigsuspend",
800 "action": "SCMP_ACT_ALLOW",
801 "args": []
802 },
803 {
804 "name": "rt_sigtimedwait",
805 "action": "SCMP_ACT_ALLOW",
806 "args": []
807 },
808 {
809 "name": "rt_tgsigqueueinfo",
810 "action": "SCMP_ACT_ALLOW",
811 "args": []
812 },
813 {
814 "name": "sched_getaffinity",
815 "action": "SCMP_ACT_ALLOW",
816 "args": []
817 },
818 {
819 "name": "sched_getattr",
820 "action": "SCMP_ACT_ALLOW",
821 "args": []
822 },
823 {
824 "name": "sched_getparam",
825 "action": "SCMP_ACT_ALLOW",
826 "args": []
827 },
828 {
829 "name": "sched_get_priority_max",
830 "action": "SCMP_ACT_ALLOW",
831 "args": []
832 },
833 {
834 "name": "sched_get_priority_min",
835 "action": "SCMP_ACT_ALLOW",
836 "args": []
837 },
838 {
839 "name": "sched_getscheduler",
840 "action": "SCMP_ACT_ALLOW",
841 "args": []
842 },
843 {
844 "name": "sched_rr_get_interval",
845 "action": "SCMP_ACT_ALLOW",
846 "args": []
847 },
848 {
849 "name": "sched_setaffinity",
850 "action": "SCMP_ACT_ALLOW",
851 "args": []
852 },
853 {
854 "name": "sched_setattr",
855 "action": "SCMP_ACT_ALLOW",
856 "args": []
857 },
858 {
859 "name": "sched_setparam",
860 "action": "SCMP_ACT_ALLOW",
861 "args": []
862 },
863 {
864 "name": "sched_setscheduler",
865 "action": "SCMP_ACT_ALLOW",
866 "args": []
867 },
868 {
869 "name": "sched_yield",
870 "action": "SCMP_ACT_ALLOW",
871 "args": []
872 },
873 {
874 "name": "seccomp",
875 "action": "SCMP_ACT_ALLOW",
876 "args": []
877 },
878 {
879 "name": "select",
880 "action": "SCMP_ACT_ALLOW",
881 "args": []
882 },
883 {
884 "name": "semctl",
885 "action": "SCMP_ACT_ALLOW",
886 "args": []
887 },
888 {
889 "name": "semget",
890 "action": "SCMP_ACT_ALLOW",
891 "args": []
892 },
893 {
894 "name": "semop",
895 "action": "SCMP_ACT_ALLOW",
896 "args": []
897 },
898 {
899 "name": "semtimedop",
900 "action": "SCMP_ACT_ALLOW",
901 "args": []
902 },
903 {
904 "name": "send",
905 "action": "SCMP_ACT_ALLOW",
906 "args": []
907 },
908 {
909 "name": "sendfile",
910 "action": "SCMP_ACT_ALLOW",
911 "args": []
912 },
913 {
914 "name": "sendfile64",
915 "action": "SCMP_ACT_ALLOW",
916 "args": []
917 },
918 {
919 "name": "sendmmsg",
920 "action": "SCMP_ACT_ALLOW",
921 "args": []
922 },
923 {
924 "name": "sendmsg",
925 "action": "SCMP_ACT_ALLOW",
926 "args": []
927 },
928 {
929 "name": "sendto",
930 "action": "SCMP_ACT_ALLOW",
931 "args": []
932 },
933 {
934 "name": "setfsgid",
935 "action": "SCMP_ACT_ALLOW",
936 "args": []
937 },
938 {
939 "name": "setfsgid32",
940 "action": "SCMP_ACT_ALLOW",
941 "args": []
942 },
943 {
944 "name": "setfsuid",
945 "action": "SCMP_ACT_ALLOW",
946 "args": []
947 },
948 {
949 "name": "setfsuid32",
950 "action": "SCMP_ACT_ALLOW",
951 "args": []
952 },
953 {
954 "name": "setgid",
955 "action": "SCMP_ACT_ALLOW",
956 "args": []
957 },
958 {
959 "name": "setgid32",
960 "action": "SCMP_ACT_ALLOW",
961 "args": []
962 },
963 {
964 "name": "setgroups",
965 "action": "SCMP_ACT_ALLOW",
966 "args": []
967 },
968 {
969 "name": "setgroups32",
970 "action": "SCMP_ACT_ALLOW",
971 "args": []
972 },
973 {
974 "name": "setitimer",
975 "action": "SCMP_ACT_ALLOW",
976 "args": []
977 },
978 {
979 "name": "setpgid",
980 "action": "SCMP_ACT_ALLOW",
981 "args": []
982 },
983 {
984 "name": "setpriority",
985 "action": "SCMP_ACT_ALLOW",
986 "args": []
987 },
988 {
989 "name": "setregid",
990 "action": "SCMP_ACT_ALLOW",
991 "args": []
992 },
993 {
994 "name": "setregid32",
995 "action": "SCMP_ACT_ALLOW",
996 "args": []
997 },
998 {
999 "name": "setresgid",
1000 "action": "SCMP_ACT_ALLOW",
1001 "args": []
1002 },
1003 {
1004 "name": "setresgid32",
1005 "action": "SCMP_ACT_ALLOW",
1006 "args": []
1007 },
1008 {
1009 "name": "setresuid",
1010 "action": "SCMP_ACT_ALLOW",
1011 "args": []
1012 },
1013 {
1014 "name": "setresuid32",
1015 "action": "SCMP_ACT_ALLOW",
1016 "args": []
1017 },
1018 {
1019 "name": "setreuid",
1020 "action": "SCMP_ACT_ALLOW",
1021 "args": []
1022 },
1023 {
1024 "name": "setreuid32",
1025 "action": "SCMP_ACT_ALLOW",
1026 "args": []
1027 },
1028 {
1029 "name": "setrlimit",
1030 "action": "SCMP_ACT_ALLOW",
1031 "args": []
1032 },
1033 {
1034 "name": "set_robust_list",
1035 "action": "SCMP_ACT_ALLOW",
1036 "args": []
1037 },
1038 {
1039 "name": "setsid",
1040 "action": "SCMP_ACT_ALLOW",
1041 "args": []
1042 },
1043 {
1044 "name": "setsockopt",
1045 "action": "SCMP_ACT_ALLOW",
1046 "args": []
1047 },
1048 {
1049 "name": "set_thread_area",
1050 "action": "SCMP_ACT_ALLOW",
1051 "args": []
1052 },
1053 {
1054 "name": "set_tid_address",
1055 "action": "SCMP_ACT_ALLOW",
1056 "args": []
1057 },
1058 {
1059 "name": "setuid",
1060 "action": "SCMP_ACT_ALLOW",
1061 "args": []
1062 },
1063 {
1064 "name": "setuid32",
1065 "action": "SCMP_ACT_ALLOW",
1066 "args": []
1067 },
1068 {
1069 "name": "setxattr",
1070 "action": "SCMP_ACT_ALLOW",
1071 "args": []
1072 },
1073 {
1074 "name": "shmat",
1075 "action": "SCMP_ACT_ALLOW",
1076 "args": []
1077 },
1078 {
1079 "name": "shmctl",
1080 "action": "SCMP_ACT_ALLOW",
1081 "args": []
1082 },
1083 {
1084 "name": "shmdt",
1085 "action": "SCMP_ACT_ALLOW",
1086 "args": []
1087 },
1088 {
1089 "name": "shmget",
1090 "action": "SCMP_ACT_ALLOW",
1091 "args": []
1092 },
1093 {
1094 "name": "shutdown",
1095 "action": "SCMP_ACT_ALLOW",
1096 "args": []
1097 },
1098 {
1099 "name": "sigaltstack",
1100 "action": "SCMP_ACT_ALLOW",
1101 "args": []
1102 },
1103 {
1104 "name": "signalfd",
1105 "action": "SCMP_ACT_ALLOW",
1106 "args": []
1107 },
1108 {
1109 "name": "signalfd4",
1110 "action": "SCMP_ACT_ALLOW",
1111 "args": []
1112 },
1113 {
1114 "name": "sigreturn",
1115 "action": "SCMP_ACT_ALLOW",
1116 "args": []
1117 },
1118 {
Jess Frazelle0431b7b2016-05-23 13:50:22 -07001119 "name": "splice",
1120 "action": "SCMP_ACT_ALLOW",
1121 "args": []
1122 },
1123 {
1124 "name": "stat",
1125 "action": "SCMP_ACT_ALLOW",
1126 "args": []
1127 },
1128 {
1129 "name": "stat64",
1130 "action": "SCMP_ACT_ALLOW",
1131 "args": []
1132 },
1133 {
1134 "name": "statfs",
1135 "action": "SCMP_ACT_ALLOW",
1136 "args": []
1137 },
1138 {
1139 "name": "statfs64",
1140 "action": "SCMP_ACT_ALLOW",
1141 "args": []
1142 },
1143 {
1144 "name": "symlink",
1145 "action": "SCMP_ACT_ALLOW",
1146 "args": []
1147 },
1148 {
1149 "name": "symlinkat",
1150 "action": "SCMP_ACT_ALLOW",
1151 "args": []
1152 },
1153 {
1154 "name": "sync",
1155 "action": "SCMP_ACT_ALLOW",
1156 "args": []
1157 },
1158 {
1159 "name": "sync_file_range",
1160 "action": "SCMP_ACT_ALLOW",
1161 "args": []
1162 },
1163 {
1164 "name": "syncfs",
1165 "action": "SCMP_ACT_ALLOW",
1166 "args": []
1167 },
1168 {
1169 "name": "sysinfo",
1170 "action": "SCMP_ACT_ALLOW",
1171 "args": []
1172 },
1173 {
1174 "name": "syslog",
1175 "action": "SCMP_ACT_ALLOW",
1176 "args": []
1177 },
1178 {
1179 "name": "tee",
1180 "action": "SCMP_ACT_ALLOW",
1181 "args": []
1182 },
1183 {
1184 "name": "tgkill",
1185 "action": "SCMP_ACT_ALLOW",
1186 "args": []
1187 },
1188 {
1189 "name": "time",
1190 "action": "SCMP_ACT_ALLOW",
1191 "args": []
1192 },
1193 {
1194 "name": "timer_create",
1195 "action": "SCMP_ACT_ALLOW",
1196 "args": []
1197 },
1198 {
1199 "name": "timer_delete",
1200 "action": "SCMP_ACT_ALLOW",
1201 "args": []
1202 },
1203 {
1204 "name": "timerfd_create",
1205 "action": "SCMP_ACT_ALLOW",
1206 "args": []
1207 },
1208 {
1209 "name": "timerfd_gettime",
1210 "action": "SCMP_ACT_ALLOW",
1211 "args": []
1212 },
1213 {
1214 "name": "timerfd_settime",
1215 "action": "SCMP_ACT_ALLOW",
1216 "args": []
1217 },
1218 {
1219 "name": "timer_getoverrun",
1220 "action": "SCMP_ACT_ALLOW",
1221 "args": []
1222 },
1223 {
1224 "name": "timer_gettime",
1225 "action": "SCMP_ACT_ALLOW",
1226 "args": []
1227 },
1228 {
1229 "name": "timer_settime",
1230 "action": "SCMP_ACT_ALLOW",
1231 "args": []
1232 },
1233 {
1234 "name": "times",
1235 "action": "SCMP_ACT_ALLOW",
1236 "args": []
1237 },
1238 {
1239 "name": "tkill",
1240 "action": "SCMP_ACT_ALLOW",
1241 "args": []
1242 },
1243 {
1244 "name": "truncate",
1245 "action": "SCMP_ACT_ALLOW",
1246 "args": []
1247 },
1248 {
1249 "name": "truncate64",
1250 "action": "SCMP_ACT_ALLOW",
1251 "args": []
1252 },
1253 {
1254 "name": "ugetrlimit",
1255 "action": "SCMP_ACT_ALLOW",
1256 "args": []
1257 },
1258 {
1259 "name": "umask",
1260 "action": "SCMP_ACT_ALLOW",
1261 "args": []
1262 },
1263 {
1264 "name": "uname",
1265 "action": "SCMP_ACT_ALLOW",
1266 "args": []
1267 },
1268 {
1269 "name": "unlink",
1270 "action": "SCMP_ACT_ALLOW",
1271 "args": []
1272 },
1273 {
1274 "name": "unlinkat",
1275 "action": "SCMP_ACT_ALLOW",
1276 "args": []
1277 },
1278 {
1279 "name": "utime",
1280 "action": "SCMP_ACT_ALLOW",
1281 "args": []
1282 },
1283 {
1284 "name": "utimensat",
1285 "action": "SCMP_ACT_ALLOW",
1286 "args": []
1287 },
1288 {
1289 "name": "utimes",
1290 "action": "SCMP_ACT_ALLOW",
1291 "args": []
1292 },
1293 {
1294 "name": "vfork",
1295 "action": "SCMP_ACT_ALLOW",
1296 "args": []
1297 },
1298 {
1299 "name": "vmsplice",
1300 "action": "SCMP_ACT_ALLOW",
1301 "args": []
1302 },
1303 {
1304 "name": "wait4",
1305 "action": "SCMP_ACT_ALLOW",
1306 "args": []
1307 },
1308 {
1309 "name": "waitid",
1310 "action": "SCMP_ACT_ALLOW",
1311 "args": []
1312 },
1313 {
1314 "name": "waitpid",
1315 "action": "SCMP_ACT_ALLOW",
1316 "args": []
1317 },
1318 {
1319 "name": "write",
1320 "action": "SCMP_ACT_ALLOW",
1321 "args": []
1322 },
1323 {
1324 "name": "writev",
1325 "action": "SCMP_ACT_ALLOW",
1326 "args": []
1327 },
1328 {
1329 "name": "arch_prctl",
1330 "action": "SCMP_ACT_ALLOW",
1331 "args": []
1332 },
1333 {
1334 "name": "chown",
1335 "action": "SCMP_ACT_ALLOW",
1336 "args": []
1337 },
1338 {
1339 "name": "chown32",
1340 "action": "SCMP_ACT_ALLOW",
1341 "args": []
1342 },
1343 {
1344 "name": "fchown",
1345 "action": "SCMP_ACT_ALLOW",
1346 "args": []
1347 },
1348 {
1349 "name": "fchown32",
1350 "action": "SCMP_ACT_ALLOW",
1351 "args": []
1352 },
1353 {
Jess Frazelle0431b7b2016-05-23 13:50:22 -07001354 "name": "clone",
1355 "action": "SCMP_ACT_ALLOW",
1356 "args": [
1357 {
1358 "index": 0,
1359 "value": 2080505856,
1360 "valueTwo": 0,
1361 "op": "SCMP_CMP_MASKED_EQ"
1362 }
1363 ]
Jess Frazelle0431b7b2016-05-23 13:50:22 -07001364 }
1365 ]
1366}`
1367)