54372522f6
Syscalls observered when running on arm32. Add them to seccomp rule.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 3724ed3d68)
81 lines
1 KiB
JSON
81 lines
1 KiB
JSON
{
|
|
"whitelist": [
|
|
"accept",
|
|
"accept4",
|
|
"access",
|
|
"arm_fadvise64_64",
|
|
"bind",
|
|
"brk",
|
|
"clock_gettime",
|
|
"clone",
|
|
"close",
|
|
"connect",
|
|
"epoll_create1",
|
|
"epoll_ctl",
|
|
"epoll_pwait",
|
|
"exit",
|
|
"exit_group",
|
|
"fadvise64",
|
|
"fallocate",
|
|
"fcntl",
|
|
"fcntl64",
|
|
"fstat",
|
|
"fstat64",
|
|
"fsync",
|
|
"futex",
|
|
"getdents64",
|
|
"getpeername",
|
|
"getpid",
|
|
"getsockname",
|
|
"getsockopt",
|
|
"getuid32",
|
|
"ioctl",
|
|
"listen",
|
|
"_llseek",
|
|
"lseek",
|
|
"madvise",
|
|
"membarrier",
|
|
"mkdir",
|
|
"mmap",
|
|
"mmap2",
|
|
"mprotect",
|
|
"mremap",
|
|
"munmap",
|
|
"nanosleep",
|
|
"_newselect",
|
|
"open",
|
|
"pipe",
|
|
"pipe2",
|
|
"poll",
|
|
"pread64",
|
|
"prlimit64",
|
|
"pwrite64",
|
|
"quotactl",
|
|
"read",
|
|
"readlink",
|
|
"readv",
|
|
"recvfrom",
|
|
"rename",
|
|
"rmdir",
|
|
"rt_sigaction",
|
|
"rt_sigprocmask",
|
|
"rt_sigreturn",
|
|
"select",
|
|
"sendto",
|
|
"setsockopt",
|
|
"shutdown",
|
|
"sigreturn",
|
|
"socket",
|
|
"stat",
|
|
"stat64",
|
|
"socketpair",
|
|
"umask",
|
|
"uname",
|
|
"unlink",
|
|
"statfs64",
|
|
"umask",
|
|
"write",
|
|
"writev"
|
|
],
|
|
"policy": 1
|
|
}
|