fwdctl-seccomp.json

{
    "defaultAction": "SCMP_ACT_ERRNO",
    "architectures": [
        "SCMP_ARCH_X86_64",
        "SCMP_ARCH_X86",
        "SCMP_ARCH_X32"
    ],
    "syscalls": [
        {
            "names": [
                "access",
                "arch_prctl",
                "bind",
                "brk",
                "capget",
                "capset",
                "chdir",
                "clone",
                "clone3",
                "close",
                "dup3",
                "epoll_create1",
                "epoll_ctl",
                "epoll_pwait",
                "eventfd",
                "eventfd2",
                "execve",
                "exit_group",
                "faccessat2",
                "fchown",
                "fcntl",
                "fstat",
                "fstatfs",
                "futex",
                "getcwd",
                "getdents64",
                "geteuid",
                "getpgrp",
                "getpid",
                "getppid",
                "getrandom",
                "getrlimit",
                "getsockname",
                "gettid",
                "ioctl",
                "lseek",
                "lstat",
                "madvise",
                "mmap",
                "mprotect",
                "munmap",
                "nanosleep",
                "newfstatat",
                "openat",
                "pipe2",
                "prctl",
                "pread64",
                "prlimit64",
                "read",
                "recvfrom",
                "rseq",
                "rt_sigaction",
                "rt_sigprocmask",
                "rt_sigreturn",
                "sched_getaffinity",
                "sendto",
                "set_robust_list",
                "set_tid_address",
                "setgid",
                "setgroups",
                "setrlimit",
                "setsid",
                "setuid",
                "sigaltstack",
                "socket",
                "stat",
                "tgkill",
                "wait4",
                "waitid",
                "write"
            ],
            "action": "SCMP_ACT_ALLOW"
        }
    ]
}