Skip to content

Instantly share code, notes, and snippets.

@Xyene

Xyene/failure-log Secret

Last active June 17, 2020 17:44
Show Gist options
  • Save Xyene/2b63e5ca2b894c212fb8fc39e17be867 to your computer and use it in GitHub Desktop.
Save Xyene/2b63e5ca2b894c212fb8fc39e17be867 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
failure-log
seccomp_load: Cannot allocate memory
child_arch=3221225534
syscall list:
0
1
3
5
8
9
10
11
12
13
14
15
16
17
20
22
23
24
25
28
32
33
35
39
56
63
72
78
79
96
97
98
99
102
104
107
108
110
111
131
137
143
145
146
147
154
158
186
201
202
204
205
217
218
219
222
223
226
228
229
271
273
283
292
293
318
BPF:
(reported EFAULT)
PFC:
#
# pseudo filter code start
#
# filter for arch x86_64 (3221225534)
if ($arch == 3221225534)
# filter for syscall "getrandom" (318) [priority: 65535]
if ($syscall == 318)
action ALLOW;
# filter for syscall "pipe2" (293) [priority: 65535]
if ($syscall == 293)
action ALLOW;
# filter for syscall "dup3" (292) [priority: 65535]
if ($syscall == 292)
action ALLOW;
# filter for syscall "timerfd_create" (283) [priority: 65535]
if ($syscall == 283)
action ALLOW;
# filter for syscall "set_robust_list" (273) [priority: 65535]
if ($syscall == 273)
action ALLOW;
# filter for syscall "ppoll" (271) [priority: 65535]
if ($syscall == 271)
action ALLOW;
# filter for syscall "clock_getres" (229) [priority: 65535]
if ($syscall == 229)
action ALLOW;
# filter for syscall "clock_gettime" (228) [priority: 65535]
if ($syscall == 228)
action ALLOW;
# filter for syscall "timer_delete" (226) [priority: 65535]
if ($syscall == 226)
action ALLOW;
# filter for syscall "timer_settime" (223) [priority: 65535]
if ($syscall == 223)
action ALLOW;
# filter for syscall "timer_create" (222) [priority: 65535]
if ($syscall == 222)
action ALLOW;
# filter for syscall "restart_syscall" (219) [priority: 65535]
if ($syscall == 219)
action ALLOW;
# filter for syscall "set_tid_address" (218) [priority: 65535]
if ($syscall == 218)
action ALLOW;
# filter for syscall "getdents64" (217) [priority: 65535]
if ($syscall == 217)
action ALLOW;
# filter for syscall "set_thread_area" (205) [priority: 65535]
if ($syscall == 205)
action ALLOW;
# filter for syscall "sched_getaffinity" (204) [priority: 65535]
if ($syscall == 204)
action ALLOW;
# filter for syscall "futex" (202) [priority: 65535]
if ($syscall == 202)
action ALLOW;
# filter for syscall "time" (201) [priority: 65535]
if ($syscall == 201)
action ALLOW;
# filter for syscall "gettid" (186) [priority: 65535]
if ($syscall == 186)
action ALLOW;
# filter for syscall "arch_prctl" (158) [priority: 65535]
if ($syscall == 158)
action ALLOW;
# filter for syscall "modify_ldt" (154) [priority: 65535]
if ($syscall == 154)
action ALLOW;
# filter for syscall "sched_get_priority_min" (147) [priority: 65535]
if ($syscall == 147)
action ALLOW;
# filter for syscall "sched_get_priority_max" (146) [priority: 65535]
if ($syscall == 146)
action ALLOW;
# filter for syscall "sched_getscheduler" (145) [priority: 65535]
if ($syscall == 145)
action ALLOW;
# filter for syscall "sched_getparam" (143) [priority: 65535]
if ($syscall == 143)
action ALLOW;
# filter for syscall "statfs" (137) [priority: 65535]
if ($syscall == 137)
action ALLOW;
# filter for syscall "sigaltstack" (131) [priority: 65535]
if ($syscall == 131)
action ALLOW;
# filter for syscall "getpgrp" (111) [priority: 65535]
if ($syscall == 111)
action ALLOW;
# filter for syscall "getppid" (110) [priority: 65535]
if ($syscall == 110)
action ALLOW;
# filter for syscall "getegid" (108) [priority: 65535]
if ($syscall == 108)
action ALLOW;
# filter for syscall "geteuid" (107) [priority: 65535]
if ($syscall == 107)
action ALLOW;
# filter for syscall "getgid" (104) [priority: 65535]
if ($syscall == 104)
action ALLOW;
# filter for syscall "getuid" (102) [priority: 65535]
if ($syscall == 102)
action ALLOW;
# filter for syscall "sysinfo" (99) [priority: 65535]
if ($syscall == 99)
action ALLOW;
# filter for syscall "getrusage" (98) [priority: 65535]
if ($syscall == 98)
action ALLOW;
# filter for syscall "getrlimit" (97) [priority: 65535]
if ($syscall == 97)
action ALLOW;
# filter for syscall "gettimeofday" (96) [priority: 65535]
if ($syscall == 96)
action ALLOW;
# filter for syscall "getcwd" (79) [priority: 65535]
if ($syscall == 79)
action ALLOW;
# filter for syscall "getdents" (78) [priority: 65535]
if ($syscall == 78)
action ALLOW;
# filter for syscall "fcntl" (72) [priority: 65535]
if ($syscall == 72)
action ALLOW;
# filter for syscall "uname" (63) [priority: 65535]
if ($syscall == 63)
action ALLOW;
# filter for syscall "clone" (56) [priority: 65535]
if ($syscall == 56)
action ALLOW;
# filter for syscall "getpid" (39) [priority: 65535]
if ($syscall == 39)
action ALLOW;
# filter for syscall "nanosleep" (35) [priority: 65535]
if ($syscall == 35)
action ALLOW;
# filter for syscall "dup2" (33) [priority: 65535]
if ($syscall == 33)
action ALLOW;
# filter for syscall "dup" (32) [priority: 65535]
if ($syscall == 32)
action ALLOW;
# filter for syscall "madvise" (28) [priority: 65535]
if ($syscall == 28)
action ALLOW;
# filter for syscall "mremap" (25) [priority: 65535]
if ($syscall == 25)
action ALLOW;
# filter for syscall "sched_yield" (24) [priority: 65535]
if ($syscall == 24)
action ALLOW;
# filter for syscall "select" (23) [priority: 65535]
if ($syscall == 23)
action ALLOW;
# filter for syscall "pipe" (22) [priority: 65535]
if ($syscall == 22)
action ALLOW;
# filter for syscall "writev" (20) [priority: 65535]
if ($syscall == 20)
action ALLOW;
# filter for syscall "pread64" (17) [priority: 65535]
if ($syscall == 17)
action ALLOW;
# filter for syscall "ioctl" (16) [priority: 65535]
if ($syscall == 16)
action ALLOW;
# filter for syscall "rt_sigreturn" (15) [priority: 65535]
if ($syscall == 15)
action ALLOW;
# filter for syscall "rt_sigprocmask" (14) [priority: 65535]
if ($syscall == 14)
action ALLOW;
# filter for syscall "rt_sigaction" (13) [priority: 65535]
if ($syscall == 13)
action ALLOW;
# filter for syscall "brk" (12) [priority: 65535]
if ($syscall == 12)
action ALLOW;
# filter for syscall "munmap" (11) [priority: 65535]
if ($syscall == 11)
action ALLOW;
# filter for syscall "mprotect" (10) [priority: 65535]
if ($syscall == 10)
action ALLOW;
# filter for syscall "mmap" (9) [priority: 65535]
if ($syscall == 9)
action ALLOW;
# filter for syscall "lseek" (8) [priority: 65535]
if ($syscall == 8)
action ALLOW;
# filter for syscall "fstat" (5) [priority: 65535]
if ($syscall == 5)
action ALLOW;
# filter for syscall "close" (3) [priority: 65535]
if ($syscall == 3)
action ALLOW;
# filter for syscall "write" (1) [priority: 65535]
if ($syscall == 1)
action ALLOW;
# filter for syscall "read" (0) [priority: 65535]
if ($syscall == 0)
action ALLOW;
# default action
action TRACE(0);
# invalid architecture action
action KILL;
#
# pseudo filter code end
#
'
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment