security-profiles-operator/examples/baseprofile-runc.yaml at main · kubernetes-sigs/security-profiles-operator · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
---
apiVersion: security-profiles-operator.x-k8s.io/v1beta1
kind: SeccompProfile
metadata:
  name: runc-v1.4.0
spec:
  defaultAction: SCMP_ACT_ERRNO
  architectures:
    - SCMP_ARCH_X86_64
  syscalls:
    - action: SCMP_ACT_ALLOW
      names:
        - arch_prctl
        - brk
        - capget
        - capset
        - chdir
        - close
        - close_range
        - epoll_ctl
        - epoll_pwait
        - execve
        - exit_group
        - faccessat2
        - fcntl
        - fstat
        - fstatfs
        - futex
        - getcwd
        - getdents64
        - getpid
        - getppid
        - getuid
        - mmap
        - mprotect
        - nanosleep
        - newfstatat
        - openat
        - openat2
        - prctl
        - read
        - recvfrom
        - rt_sigreturn
        - sched_yield
        - set_tid_address
        - setgid
        - setgroups
        - setuid
        - sigaltstack
        - statx
        - tgkill
        - write