github.com/castai/kvisor@v1.7.1-0.20240516114728-b3572a2607b5/demo/4.apply-seccom/profile.json (about) 1 { 2 "defaultAction": "SCMP_ACT_ERRNO", 3 "architectures": [ 4 "SCMP_ARCH_X86_64", 5 "SCMP_ARCH_X86", 6 "SCMP_ARCH_X32" 7 ], 8 "syscalls": [ 9 { 10 "names": [ 11 "accept4", 12 "epoll_wait", 13 "pselect6", 14 "futex", 15 "madvise", 16 "epoll_ctl", 17 "getsockname", 18 "setsockopt", 19 "vfork", 20 "mmap", 21 "read", 22 "write", 23 "close", 24 "arch_prctl", 25 "sched_getaffinity", 26 "munmap", 27 "brk", 28 "rt_sigaction", 29 "rt_sigprocmask", 30 "sigaltstack", 31 "gettid", 32 "clone", 33 "bind", 34 "socket", 35 "openat", 36 "readlinkat", 37 "exit_group", 38 "epoll_create1", 39 "listen", 40 "rt_sigreturn", 41 "sched_yield", 42 "clock_gettime", 43 "connect", 44 "dup2", 45 "epoll_pwait", 46 "execve", 47 "exit", 48 "fcntl", 49 "getpid", 50 "getuid", 51 "ioctl", 52 "mprotect", 53 "nanosleep", 54 "open", 55 "poll", 56 "recvfrom", 57 "sendto", 58 "set_tid_address", 59 "setitimer", 60 "writev" 61 ], 62 "action": "SCMP_ACT_ALLOW" 63 } 64 ] 65 }