Update to latest seccomp filters in moby
"accept",
"accept4",
"access",
- "alarm",
+ "adjtimex",
"alarm",
"bind",
"brk",
"prctl",
"pread64",
"preadv",
+ "preadv2",
"prlimit64",
"pselect6",
"pwrite64",
"pwritev",
+ "pwritev2",
"read",
"readahead",
"readlink",
"includes": {},
"excludes": {}
},
+ {
+ "names": [
+ "personality"
+ ],
+ "action": "SCMP_ACT_ALLOW",
+ "args": [
+ {
+ "index": 0,
+ "value": 131072,
+ "valueTwo": 0,
+ "op": "SCMP_CMP_EQ"
+ }
+ ],
+ "comment": "",
+ "includes": {},
+ "excludes": {}
+ },
+ {
+ "names": [
+ "personality"
+ ],
+ "action": "SCMP_ACT_ALLOW",
+ "args": [
+ {
+ "index": 0,
+ "value": 131080,
+ "valueTwo": 0,
+ "op": "SCMP_CMP_EQ"
+ }
+ ],
+ "comment": "",
+ "includes": {},
+ "excludes": {}
+ },
{
"names": [
"personality"
},
{
"names": [
+ "sync_file_range2"
+ ],
+ "action": "SCMP_ACT_ALLOW",
+ "args": [],
+ "comment": "",
+ "includes": {
+ "arches": [
+ "ppc64le"
+ ]
+ },
+ "excludes": {}
+ },
+ {
+ "names": [
+ "arm_fadvise64_64",
+ "arm_sync_file_range",
+ "sync_file_range2",
"breakpoint",
"cacheflush",
"set_tls"
"mount",
"name_to_handle_at",
"perf_event_open",
+ "quotactl",
"setdomainname",
"sethostname",
"setns",
"names": [
"settimeofday",
"stime",
- "adjtimex"
+ "clock_settime"
],
"action": "SCMP_ACT_ALLOW",
"args": [],
