bb3e91
{
bb3e91
	"defaultAction": "SCMP_ACT_ERRNO",
bb3e91
	"defaultErrnoRet": 38,
bb3e91
	"defaultErrno": "ENOSYS",
bb3e91
	"archMap": [
bb3e91
		{
bb3e91
			"architecture": "SCMP_ARCH_X86_64",
bb3e91
			"subArchitectures": [
bb3e91
				"SCMP_ARCH_X86",
bb3e91
				"SCMP_ARCH_X32"
bb3e91
			]
bb3e91
		},
bb3e91
		{
bb3e91
			"architecture": "SCMP_ARCH_AARCH64",
bb3e91
			"subArchitectures": [
bb3e91
				"SCMP_ARCH_ARM"
bb3e91
			]
bb3e91
		},
bb3e91
		{
bb3e91
			"architecture": "SCMP_ARCH_MIPS64",
bb3e91
			"subArchitectures": [
bb3e91
				"SCMP_ARCH_MIPS",
bb3e91
				"SCMP_ARCH_MIPS64N32"
bb3e91
			]
bb3e91
		},
bb3e91
		{
bb3e91
			"architecture": "SCMP_ARCH_MIPS64N32",
bb3e91
			"subArchitectures": [
bb3e91
				"SCMP_ARCH_MIPS",
bb3e91
				"SCMP_ARCH_MIPS64"
bb3e91
			]
bb3e91
		},
bb3e91
		{
bb3e91
			"architecture": "SCMP_ARCH_MIPSEL64",
bb3e91
			"subArchitectures": [
bb3e91
				"SCMP_ARCH_MIPSEL",
bb3e91
				"SCMP_ARCH_MIPSEL64N32"
bb3e91
			]
bb3e91
		},
bb3e91
		{
bb3e91
			"architecture": "SCMP_ARCH_MIPSEL64N32",
bb3e91
			"subArchitectures": [
bb3e91
				"SCMP_ARCH_MIPSEL",
bb3e91
				"SCMP_ARCH_MIPSEL64"
bb3e91
			]
bb3e91
		},
bb3e91
		{
bb3e91
			"architecture": "SCMP_ARCH_S390X",
bb3e91
			"subArchitectures": [
bb3e91
				"SCMP_ARCH_S390"
bb3e91
			]
bb3e91
		}
bb3e91
	],
bb3e91
	"syscalls": [
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"bdflush",
bb3e91
				"io_pgetevents",
bb3e91
				"kexec_file_load",
bb3e91
				"kexec_load",
bb3e91
				"migrate_pages",
bb3e91
				"move_pages",
bb3e91
				"nfsservctl",
bb3e91
				"nice",
bb3e91
				"oldfstat",
bb3e91
				"oldlstat",
bb3e91
				"oldolduname",
bb3e91
				"oldstat",
bb3e91
				"olduname",
bb3e91
				"pciconfig_iobase",
bb3e91
				"pciconfig_read",
bb3e91
				"pciconfig_write",
bb3e91
				"sgetmask",
bb3e91
				"ssetmask",
bb3e91
				"swapcontext",
bb3e91
				"swapoff",
bb3e91
				"swapon",
bb3e91
				"sysfs",
bb3e91
				"uselib",
bb3e91
				"userfaultfd",
bb3e91
				"ustat",
bb3e91
				"vm86",
bb3e91
				"vm86old",
bb3e91
				"vmsplice"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ERRNO",
bb3e91
			"args": [],
bb3e91
			"comment": "",
bb3e91
			"includes": {},
bb3e91
			"excludes": {},
bb3e91
			"errnoRet": 1,
bb3e91
			"errno": "EPERM"
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"_llseek",
bb3e91
				"_newselect",
bb3e91
				"accept",
bb3e91
				"accept4",
bb3e91
				"access",
bb3e91
				"adjtimex",
bb3e91
				"alarm",
bb3e91
				"bind",
bb3e91
				"brk",
bb3e91
				"capget",
bb3e91
				"capset",
bb3e91
				"chdir",
bb3e91
				"chmod",
bb3e91
				"chown",
bb3e91
				"chown32",
bb3e91
				"clock_adjtime",
bb3e91
				"clock_adjtime64",
bb3e91
				"clock_getres",
bb3e91
				"clock_getres_time64",
bb3e91
				"clock_gettime",
bb3e91
				"clock_gettime64",
bb3e91
				"clock_nanosleep",
bb3e91
				"clock_nanosleep_time64",
bb3e91
				"clone",
bb3e91
				"clone3",
bb3e91
				"close",
bb3e91
				"close_range",
bb3e91
				"connect",
bb3e91
				"copy_file_range",
bb3e91
				"creat",
bb3e91
				"dup",
bb3e91
				"dup2",
bb3e91
				"dup3",
bb3e91
				"epoll_create",
bb3e91
				"epoll_create1",
bb3e91
				"epoll_ctl",
bb3e91
				"epoll_ctl_old",
bb3e91
				"epoll_pwait",
bb3e91
				"epoll_pwait2",
bb3e91
				"epoll_wait",
bb3e91
				"epoll_wait_old",
bb3e91
				"eventfd",
bb3e91
				"eventfd2",
bb3e91
				"execve",
bb3e91
				"execveat",
bb3e91
				"exit",
bb3e91
				"exit_group",
bb3e91
				"faccessat",
bb3e91
				"faccessat2",
bb3e91
				"fadvise64",
bb3e91
				"fadvise64_64",
bb3e91
				"fallocate",
bb3e91
				"fanotify_mark",
bb3e91
				"fchdir",
bb3e91
				"fchmod",
bb3e91
				"fchmodat",
bb3e91
				"fchown",
bb3e91
				"fchown32",
bb3e91
				"fchownat",
bb3e91
				"fcntl",
bb3e91
				"fcntl64",
bb3e91
				"fdatasync",
bb3e91
				"fgetxattr",
bb3e91
				"flistxattr",
bb3e91
				"flock",
bb3e91
				"fork",
bb3e91
				"fremovexattr",
bb3e91
				"fsconfig",
bb3e91
				"fsetxattr",
bb3e91
				"fsmount",
bb3e91
				"fsopen",
bb3e91
				"fspick",
bb3e91
				"fstat",
bb3e91
				"fstat64",
bb3e91
				"fstatat64",
bb3e91
				"fstatfs",
bb3e91
				"fstatfs64",
bb3e91
				"fsync",
bb3e91
				"ftruncate",
bb3e91
				"ftruncate64",
bb3e91
				"futex",
bb3e91
				"futex_time64",
bb3e91
				"futimesat",
947b07
				"get_mempolicy",
bb3e91
				"get_robust_list",
bb3e91
				"get_thread_area",
bb3e91
				"getcpu",
bb3e91
				"getcwd",
bb3e91
				"getdents",
bb3e91
				"getdents64",
bb3e91
				"getegid",
bb3e91
				"getegid32",
bb3e91
				"geteuid",
bb3e91
				"geteuid32",
bb3e91
				"getgid",
bb3e91
				"getgid32",
bb3e91
				"getgroups",
bb3e91
				"getgroups32",
bb3e91
				"getitimer",
bb3e91
				"getpeername",
bb3e91
				"getpgid",
bb3e91
				"getpgrp",
bb3e91
				"getpid",
bb3e91
				"getppid",
bb3e91
				"getpriority",
bb3e91
				"getrandom",
bb3e91
				"getresgid",
bb3e91
				"getresgid32",
bb3e91
				"getresuid",
bb3e91
				"getresuid32",
bb3e91
				"getrlimit",
bb3e91
				"getrusage",
bb3e91
				"getsid",
bb3e91
				"getsockname",
bb3e91
				"getsockopt",
bb3e91
				"gettid",
bb3e91
				"gettimeofday",
bb3e91
				"getuid",
bb3e91
				"getuid32",
bb3e91
				"getxattr",
bb3e91
				"inotify_add_watch",
bb3e91
				"inotify_init",
bb3e91
				"inotify_init1",
bb3e91
				"inotify_rm_watch",
bb3e91
				"io_cancel",
bb3e91
				"io_destroy",
bb3e91
				"io_getevents",
bb3e91
				"io_setup",
bb3e91
				"io_submit",
bb3e91
				"ioctl",
bb3e91
				"ioprio_get",
bb3e91
				"ioprio_set",
bb3e91
				"ipc",
bb3e91
				"keyctl",
bb3e91
				"kill",
6ca60b
				"landlock_add_rule",
6ca60b
				"landlock_create_ruleset",
6ca60b
				"landlock_restrict_self",
bb3e91
				"lchown",
bb3e91
				"lchown32",
bb3e91
				"lgetxattr",
bb3e91
				"link",
bb3e91
				"linkat",
bb3e91
				"listen",
bb3e91
				"listxattr",
bb3e91
				"llistxattr",
bb3e91
				"lremovexattr",
bb3e91
				"lseek",
bb3e91
				"lsetxattr",
bb3e91
				"lstat",
bb3e91
				"lstat64",
bb3e91
				"madvise",
bb3e91
				"mbind",
947b07
				"membarrier",
bb3e91
				"memfd_create",
bb3e91
				"memfd_secret",
bb3e91
				"mincore",
bb3e91
				"mkdir",
bb3e91
				"mkdirat",
bb3e91
				"mknod",
bb3e91
				"mknodat",
bb3e91
				"mlock",
bb3e91
				"mlock2",
bb3e91
				"mlockall",
bb3e91
				"mmap",
bb3e91
				"mmap2",
bb3e91
				"mount",
947b07
				"mount_setattr",
bb3e91
				"move_mount",
bb3e91
				"mprotect",
bb3e91
				"mq_getsetattr",
bb3e91
				"mq_notify",
bb3e91
				"mq_open",
bb3e91
				"mq_timedreceive",
bb3e91
				"mq_timedreceive_time64",
bb3e91
				"mq_timedsend",
bb3e91
				"mq_timedsend_time64",
bb3e91
				"mq_unlink",
bb3e91
				"mremap",
bb3e91
				"msgctl",
bb3e91
				"msgget",
bb3e91
				"msgrcv",
bb3e91
				"msgsnd",
bb3e91
				"msync",
bb3e91
				"munlock",
bb3e91
				"munlockall",
bb3e91
				"munmap",
bb3e91
				"name_to_handle_at",
bb3e91
				"nanosleep",
bb3e91
				"newfstatat",
bb3e91
				"open",
947b07
				"open_tree",
bb3e91
				"openat",
bb3e91
				"openat2",
bb3e91
				"pause",
bb3e91
				"pidfd_getfd",
bb3e91
				"pidfd_open",
bb3e91
				"pidfd_send_signal",
bb3e91
				"pipe",
bb3e91
				"pipe2",
bb3e91
				"pivot_root",
bb3e91
				"pkey_alloc",
bb3e91
				"pkey_free",
bb3e91
				"pkey_mprotect",
bb3e91
				"poll",
bb3e91
				"ppoll",
bb3e91
				"ppoll_time64",
bb3e91
				"prctl",
bb3e91
				"pread64",
bb3e91
				"preadv",
bb3e91
				"preadv2",
bb3e91
				"prlimit64",
947b07
				"process_mrelease",
947b07
				"process_vm_readv",
947b07
				"process_vm_writev",
bb3e91
				"pselect6",
bb3e91
				"pselect6_time64",
947b07
				"ptrace",
bb3e91
				"pwrite64",
bb3e91
				"pwritev",
bb3e91
				"pwritev2",
bb3e91
				"read",
bb3e91
				"readahead",
bb3e91
				"readdir",
bb3e91
				"readlink",
bb3e91
				"readlinkat",
bb3e91
				"readv",
bb3e91
				"reboot",
bb3e91
				"recv",
bb3e91
				"recvfrom",
bb3e91
				"recvmmsg",
bb3e91
				"recvmmsg_time64",
bb3e91
				"recvmsg",
bb3e91
				"remap_file_pages",
bb3e91
				"removexattr",
bb3e91
				"rename",
bb3e91
				"renameat",
bb3e91
				"renameat2",
bb3e91
				"restart_syscall",
bb3e91
				"rmdir",
bb3e91
				"rseq",
bb3e91
				"rt_sigaction",
bb3e91
				"rt_sigpending",
bb3e91
				"rt_sigprocmask",
bb3e91
				"rt_sigqueueinfo",
bb3e91
				"rt_sigreturn",
bb3e91
				"rt_sigsuspend",
bb3e91
				"rt_sigtimedwait",
bb3e91
				"rt_sigtimedwait_time64",
bb3e91
				"rt_tgsigqueueinfo",
bb3e91
				"sched_get_priority_max",
bb3e91
				"sched_get_priority_min",
bb3e91
				"sched_getaffinity",
bb3e91
				"sched_getattr",
bb3e91
				"sched_getparam",
bb3e91
				"sched_getscheduler",
bb3e91
				"sched_rr_get_interval",
bb3e91
				"sched_rr_get_interval_time64",
bb3e91
				"sched_setaffinity",
bb3e91
				"sched_setattr",
bb3e91
				"sched_setparam",
bb3e91
				"sched_setscheduler",
bb3e91
				"sched_yield",
bb3e91
				"seccomp",
bb3e91
				"select",
bb3e91
				"semctl",
bb3e91
				"semget",
bb3e91
				"semop",
bb3e91
				"semtimedop",
bb3e91
				"semtimedop_time64",
bb3e91
				"send",
bb3e91
				"sendfile",
bb3e91
				"sendfile64",
bb3e91
				"sendmmsg",
bb3e91
				"sendmsg",
bb3e91
				"sendto",
bb3e91
				"set_mempolicy",
bb3e91
				"set_robust_list",
bb3e91
				"set_thread_area",
bb3e91
				"set_tid_address",
bb3e91
				"setfsgid",
bb3e91
				"setfsgid32",
bb3e91
				"setfsuid",
bb3e91
				"setfsuid32",
bb3e91
				"setgid",
bb3e91
				"setgid32",
bb3e91
				"setgroups",
bb3e91
				"setgroups32",
bb3e91
				"setitimer",
947b07
				"setns",
bb3e91
				"setpgid",
bb3e91
				"setpriority",
bb3e91
				"setregid",
bb3e91
				"setregid32",
bb3e91
				"setresgid",
bb3e91
				"setresgid32",
bb3e91
				"setresuid",
bb3e91
				"setresuid32",
bb3e91
				"setreuid",
bb3e91
				"setreuid32",
bb3e91
				"setrlimit",
bb3e91
				"setsid",
bb3e91
				"setsockopt",
bb3e91
				"setuid",
bb3e91
				"setuid32",
bb3e91
				"setxattr",
bb3e91
				"shmat",
bb3e91
				"shmctl",
bb3e91
				"shmdt",
bb3e91
				"shmget",
bb3e91
				"shutdown",
947b07
				"sigaction",
bb3e91
				"sigaltstack",
947b07
				"signal",
bb3e91
				"signalfd",
bb3e91
				"signalfd4",
947b07
				"sigpending",
947b07
				"sigprocmask",
bb3e91
				"sigreturn",
947b07
				"sigsuspend",
bb3e91
				"socket",
bb3e91
				"socketcall",
bb3e91
				"socketpair",
bb3e91
				"splice",
bb3e91
				"stat",
bb3e91
				"stat64",
bb3e91
				"statfs",
bb3e91
				"statfs64",
bb3e91
				"statx",
bb3e91
				"symlink",
bb3e91
				"symlinkat",
bb3e91
				"sync",
bb3e91
				"sync_file_range",
bb3e91
				"syncfs",
947b07
				"syscall",
bb3e91
				"sysinfo",
bb3e91
				"syslog",
bb3e91
				"tee",
bb3e91
				"tgkill",
bb3e91
				"time",
bb3e91
				"timer_create",
bb3e91
				"timer_delete",
bb3e91
				"timer_getoverrun",
bb3e91
				"timer_gettime",
bb3e91
				"timer_gettime64",
bb3e91
				"timer_settime",
bb3e91
				"timer_settime64",
947b07
				"timerfd",
bb3e91
				"timerfd_create",
bb3e91
				"timerfd_gettime",
bb3e91
				"timerfd_gettime64",
bb3e91
				"timerfd_settime",
bb3e91
				"timerfd_settime64",
bb3e91
				"times",
bb3e91
				"tkill",
bb3e91
				"truncate",
bb3e91
				"truncate64",
bb3e91
				"ugetrlimit",
bb3e91
				"umask",
bb3e91
				"umount",
bb3e91
				"umount2",
bb3e91
				"uname",
bb3e91
				"unlink",
bb3e91
				"unlinkat",
bb3e91
				"unshare",
bb3e91
				"utime",
bb3e91
				"utimensat",
bb3e91
				"utimensat_time64",
bb3e91
				"utimes",
bb3e91
				"vfork",
bb3e91
				"wait4",
bb3e91
				"waitid",
bb3e91
				"waitpid",
bb3e91
				"write",
bb3e91
				"writev"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ALLOW",
bb3e91
			"args": [],
bb3e91
			"comment": "",
bb3e91
			"includes": {},
bb3e91
			"excludes": {}
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"personality"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ALLOW",
bb3e91
			"args": [
bb3e91
				{
bb3e91
					"index": 0,
bb3e91
					"value": 0,
bb3e91
					"valueTwo": 0,
bb3e91
					"op": "SCMP_CMP_EQ"
bb3e91
				}
bb3e91
			],
bb3e91
			"comment": "",
bb3e91
			"includes": {},
bb3e91
			"excludes": {}
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"personality"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ALLOW",
bb3e91
			"args": [
bb3e91
				{
bb3e91
					"index": 0,
bb3e91
					"value": 8,
bb3e91
					"valueTwo": 0,
bb3e91
					"op": "SCMP_CMP_EQ"
bb3e91
				}
bb3e91
			],
bb3e91
			"comment": "",
bb3e91
			"includes": {},
bb3e91
			"excludes": {}
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"personality"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ALLOW",
bb3e91
			"args": [
bb3e91
				{
bb3e91
					"index": 0,
bb3e91
					"value": 131072,
bb3e91
					"valueTwo": 0,
bb3e91
					"op": "SCMP_CMP_EQ"
bb3e91
				}
bb3e91
			],
bb3e91
			"comment": "",
bb3e91
			"includes": {},
bb3e91
			"excludes": {}
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"personality"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ALLOW",
bb3e91
			"args": [
bb3e91
				{
bb3e91
					"index": 0,
bb3e91
					"value": 131080,
bb3e91
					"valueTwo": 0,
bb3e91
					"op": "SCMP_CMP_EQ"
bb3e91
				}
bb3e91
			],
bb3e91
			"comment": "",
bb3e91
			"includes": {},
bb3e91
			"excludes": {}
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"personality"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ALLOW",
bb3e91
			"args": [
bb3e91
				{
bb3e91
					"index": 0,
bb3e91
					"value": 4294967295,
bb3e91
					"valueTwo": 0,
bb3e91
					"op": "SCMP_CMP_EQ"
bb3e91
				}
bb3e91
			],
bb3e91
			"comment": "",
bb3e91
			"includes": {},
bb3e91
			"excludes": {}
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"sync_file_range2"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ALLOW",
bb3e91
			"args": [],
bb3e91
			"comment": "",
bb3e91
			"includes": {
bb3e91
				"arches": [
bb3e91
					"ppc64le"
bb3e91
				]
bb3e91
			},
bb3e91
			"excludes": {}
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"arm_fadvise64_64",
bb3e91
				"arm_sync_file_range",
bb3e91
				"breakpoint",
bb3e91
				"cacheflush",
947b07
				"set_tls",
947b07
				"sync_file_range2"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ALLOW",
bb3e91
			"args": [],
bb3e91
			"comment": "",
bb3e91
			"includes": {
bb3e91
				"arches": [
bb3e91
					"arm",
bb3e91
					"arm64"
bb3e91
				]
bb3e91
			},
bb3e91
			"excludes": {}
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"arch_prctl"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ALLOW",
bb3e91
			"args": [],
bb3e91
			"comment": "",
bb3e91
			"includes": {
bb3e91
				"arches": [
bb3e91
					"amd64",
bb3e91
					"x32"
bb3e91
				]
bb3e91
			},
bb3e91
			"excludes": {}
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"modify_ldt"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ALLOW",
bb3e91
			"args": [],
bb3e91
			"comment": "",
bb3e91
			"includes": {
bb3e91
				"arches": [
bb3e91
					"amd64",
bb3e91
					"x32",
bb3e91
					"x86"
bb3e91
				]
bb3e91
			},
bb3e91
			"excludes": {}
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"s390_pci_mmio_read",
bb3e91
				"s390_pci_mmio_write",
bb3e91
				"s390_runtime_instr"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ALLOW",
bb3e91
			"args": [],
bb3e91
			"comment": "",
bb3e91
			"includes": {
bb3e91
				"arches": [
bb3e91
					"s390",
bb3e91
					"s390x"
bb3e91
				]
bb3e91
			},
bb3e91
			"excludes": {}
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"open_by_handle_at"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ALLOW",
bb3e91
			"args": [],
bb3e91
			"comment": "",
bb3e91
			"includes": {
bb3e91
				"caps": [
bb3e91
					"CAP_DAC_READ_SEARCH"
bb3e91
				]
bb3e91
			},
bb3e91
			"excludes": {}
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"open_by_handle_at"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ERRNO",
bb3e91
			"args": [],
bb3e91
			"comment": "",
bb3e91
			"includes": {},
bb3e91
			"excludes": {
bb3e91
				"caps": [
bb3e91
					"CAP_DAC_READ_SEARCH"
bb3e91
				]
bb3e91
			},
bb3e91
			"errnoRet": 1,
bb3e91
			"errno": "EPERM"
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"bpf",
bb3e91
				"fanotify_init",
bb3e91
				"lookup_dcookie",
bb3e91
				"perf_event_open",
bb3e91
				"quotactl",
bb3e91
				"setdomainname",
bb3e91
				"sethostname",
bb3e91
				"setns"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ALLOW",
bb3e91
			"args": [],
bb3e91
			"comment": "",
bb3e91
			"includes": {
bb3e91
				"caps": [
bb3e91
					"CAP_SYS_ADMIN"
bb3e91
				]
bb3e91
			},
bb3e91
			"excludes": {}
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"bpf",
bb3e91
				"fanotify_init",
bb3e91
				"lookup_dcookie",
bb3e91
				"perf_event_open",
bb3e91
				"quotactl",
bb3e91
				"setdomainname",
bb3e91
				"sethostname",
bb3e91
				"setns"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ERRNO",
bb3e91
			"args": [],
bb3e91
			"comment": "",
bb3e91
			"includes": {},
bb3e91
			"excludes": {
bb3e91
				"caps": [
bb3e91
					"CAP_SYS_ADMIN"
bb3e91
				]
bb3e91
			},
bb3e91
			"errnoRet": 1,
bb3e91
			"errno": "EPERM"
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"chroot"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ALLOW",
bb3e91
			"args": [],
bb3e91
			"comment": "",
bb3e91
			"includes": {
bb3e91
				"caps": [
bb3e91
					"CAP_SYS_CHROOT"
bb3e91
				]
bb3e91
			},
bb3e91
			"excludes": {}
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"chroot"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ERRNO",
bb3e91
			"args": [],
bb3e91
			"comment": "",
bb3e91
			"includes": {},
bb3e91
			"excludes": {
bb3e91
				"caps": [
bb3e91
					"CAP_SYS_CHROOT"
bb3e91
				]
bb3e91
			},
bb3e91
			"errnoRet": 1,
bb3e91
			"errno": "EPERM"
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"delete_module",
bb3e91
				"finit_module",
947b07
				"init_module",
bb3e91
				"query_module"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ALLOW",
bb3e91
			"args": [],
bb3e91
			"comment": "",
bb3e91
			"includes": {
bb3e91
				"caps": [
bb3e91
					"CAP_SYS_MODULE"
bb3e91
				]
bb3e91
			},
bb3e91
			"excludes": {}
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"delete_module",
bb3e91
				"finit_module",
947b07
				"init_module",
bb3e91
				"query_module"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ERRNO",
bb3e91
			"args": [],
bb3e91
			"comment": "",
bb3e91
			"includes": {},
bb3e91
			"excludes": {
bb3e91
				"caps": [
bb3e91
					"CAP_SYS_MODULE"
bb3e91
				]
bb3e91
			},
bb3e91
			"errnoRet": 1,
bb3e91
			"errno": "EPERM"
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"acct"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ALLOW",
bb3e91
			"args": [],
bb3e91
			"comment": "",
bb3e91
			"includes": {
bb3e91
				"caps": [
bb3e91
					"CAP_SYS_PACCT"
bb3e91
				]
bb3e91
			},
bb3e91
			"excludes": {}
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"acct"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ERRNO",
bb3e91
			"args": [],
bb3e91
			"comment": "",
bb3e91
			"includes": {},
bb3e91
			"excludes": {
bb3e91
				"caps": [
bb3e91
					"CAP_SYS_PACCT"
bb3e91
				]
bb3e91
			},
bb3e91
			"errnoRet": 1,
bb3e91
			"errno": "EPERM"
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"kcmp",
947b07
				"process_madvise"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ALLOW",
bb3e91
			"args": [],
bb3e91
			"comment": "",
bb3e91
			"includes": {
bb3e91
				"caps": [
bb3e91
					"CAP_SYS_PTRACE"
bb3e91
				]
bb3e91
			},
bb3e91
			"excludes": {}
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"kcmp",
947b07
				"process_madvise"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ERRNO",
bb3e91
			"args": [],
bb3e91
			"comment": "",
bb3e91
			"includes": {},
bb3e91
			"excludes": {
bb3e91
				"caps": [
bb3e91
					"CAP_SYS_PTRACE"
bb3e91
				]
bb3e91
			},
bb3e91
			"errnoRet": 1,
bb3e91
			"errno": "EPERM"
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
947b07
				"ioperm",
947b07
				"iopl"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ALLOW",
bb3e91
			"args": [],
bb3e91
			"comment": "",
bb3e91
			"includes": {
bb3e91
				"caps": [
bb3e91
					"CAP_SYS_RAWIO"
bb3e91
				]
bb3e91
			},
bb3e91
			"excludes": {}
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
947b07
				"ioperm",
947b07
				"iopl"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ERRNO",
bb3e91
			"args": [],
bb3e91
			"comment": "",
bb3e91
			"includes": {},
bb3e91
			"excludes": {
bb3e91
				"caps": [
bb3e91
					"CAP_SYS_RAWIO"
bb3e91
				]
bb3e91
			},
bb3e91
			"errnoRet": 1,
bb3e91
			"errno": "EPERM"
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"clock_settime",
947b07
				"clock_settime64",
947b07
				"settimeofday",
947b07
				"stime"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ALLOW",
bb3e91
			"args": [],
bb3e91
			"comment": "",
bb3e91
			"includes": {
bb3e91
				"caps": [
bb3e91
					"CAP_SYS_TIME"
bb3e91
				]
bb3e91
			},
bb3e91
			"excludes": {}
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"clock_settime",
947b07
				"clock_settime64",
947b07
				"settimeofday",
947b07
				"stime"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ERRNO",
bb3e91
			"args": [],
bb3e91
			"comment": "",
bb3e91
			"includes": {},
bb3e91
			"excludes": {
bb3e91
				"caps": [
bb3e91
					"CAP_SYS_TIME"
bb3e91
				]
bb3e91
			},
bb3e91
			"errnoRet": 1,
bb3e91
			"errno": "EPERM"
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"vhangup"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ALLOW",
bb3e91
			"args": [],
bb3e91
			"comment": "",
bb3e91
			"includes": {
bb3e91
				"caps": [
bb3e91
					"CAP_SYS_TTY_CONFIG"
bb3e91
				]
bb3e91
			},
bb3e91
			"excludes": {}
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"vhangup"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ERRNO",
bb3e91
			"args": [],
bb3e91
			"comment": "",
bb3e91
			"includes": {},
bb3e91
			"excludes": {
bb3e91
				"caps": [
bb3e91
					"CAP_SYS_TTY_CONFIG"
bb3e91
				]
bb3e91
			},
bb3e91
			"errnoRet": 1,
bb3e91
			"errno": "EPERM"
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"socket"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ERRNO",
bb3e91
			"args": [
bb3e91
				{
bb3e91
					"index": 0,
bb3e91
					"value": 16,
bb3e91
					"valueTwo": 0,
bb3e91
					"op": "SCMP_CMP_EQ"
bb3e91
				},
bb3e91
				{
bb3e91
					"index": 2,
bb3e91
					"value": 9,
bb3e91
					"valueTwo": 0,
bb3e91
					"op": "SCMP_CMP_EQ"
bb3e91
				}
bb3e91
			],
bb3e91
			"comment": "",
bb3e91
			"includes": {},
bb3e91
			"excludes": {
bb3e91
				"caps": [
bb3e91
					"CAP_AUDIT_WRITE"
bb3e91
				]
bb3e91
			},
bb3e91
			"errnoRet": 22,
bb3e91
			"errno": "EINVAL"
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"socket"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ALLOW",
bb3e91
			"args": [
bb3e91
				{
bb3e91
					"index": 2,
bb3e91
					"value": 9,
bb3e91
					"valueTwo": 0,
bb3e91
					"op": "SCMP_CMP_NE"
bb3e91
				}
bb3e91
			],
bb3e91
			"comment": "",
bb3e91
			"includes": {},
bb3e91
			"excludes": {
bb3e91
				"caps": [
bb3e91
					"CAP_AUDIT_WRITE"
bb3e91
				]
bb3e91
			}
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"socket"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ALLOW",
bb3e91
			"args": [
bb3e91
				{
bb3e91
					"index": 0,
bb3e91
					"value": 16,
bb3e91
					"valueTwo": 0,
bb3e91
					"op": "SCMP_CMP_NE"
bb3e91
				}
bb3e91
			],
bb3e91
			"comment": "",
bb3e91
			"includes": {},
bb3e91
			"excludes": {
bb3e91
				"caps": [
bb3e91
					"CAP_AUDIT_WRITE"
bb3e91
				]
bb3e91
			}
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"socket"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ALLOW",
bb3e91
			"args": [
bb3e91
				{
bb3e91
					"index": 2,
bb3e91
					"value": 9,
bb3e91
					"valueTwo": 0,
bb3e91
					"op": "SCMP_CMP_NE"
bb3e91
				}
bb3e91
			],
bb3e91
			"comment": "",
bb3e91
			"includes": {},
bb3e91
			"excludes": {
bb3e91
				"caps": [
bb3e91
					"CAP_AUDIT_WRITE"
bb3e91
				]
bb3e91
			}
bb3e91
		},
bb3e91
		{
bb3e91
			"names": [
bb3e91
				"socket"
bb3e91
			],
bb3e91
			"action": "SCMP_ACT_ALLOW",
bb3e91
			"args": null,
bb3e91
			"comment": "",
bb3e91
			"includes": {
bb3e91
				"caps": [
bb3e91
					"CAP_AUDIT_WRITE"
bb3e91
				]
bb3e91
			},
bb3e91
			"excludes": {}
bb3e91
		}
bb3e91
	]
bb3e91
}