Skip to content

Instantly share code, notes, and snippets.

@pjbgf
Created November 12, 2019 11:27
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save pjbgf/018658f1aeea1ef696b451bde8c33a8f to your computer and use it in GitHub Desktop.
Save pjbgf/018658f1aeea1ef696b451bde8c33a8f to your computer and use it in GitHub Desktop.
medium-seccomp-part1-hicontainer-pod
{
"defaultAction": "SCMP_ACT_ERRNO",
"architectures": [
"SCMP_ARCH_X86_64",
"SCMP_ARCH_X86",
"SCMP_ARCH_X32"
],
"syscalls": [
{
"names": [
"arch_prctl",
"brk",
"capget",
"capset",
"chdir",
"close",
"execve",
"exit_group",
"fstat",
"fstatfs",
"futex",
"getdents64",
"getppid",
"lstat",
"mprotect",
"nanosleep",
"newfstatat",
"openat",
"prctl",
"read",
"rt_sigaction",
"statfs",
"setgid",
"setgroups",
"setuid",
"stat",
"uname",
"write"
],
"action": "SCMP_ACT_ALLOW"
}
]
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment