Update to latest seccomp filters in moby

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
This commit is contained in:
Daniel J Walsh 2017-10-18 05:12:40 -04:00
parent 915f918907
commit 704ebacab8

View file

@ -55,7 +55,7 @@
"accept", "accept",
"accept4", "accept4",
"access", "access",
"alarm", "adjtimex",
"alarm", "alarm",
"bind", "bind",
"brk", "brk",
@ -223,10 +223,12 @@
"prctl", "prctl",
"pread64", "pread64",
"preadv", "preadv",
"preadv2",
"prlimit64", "prlimit64",
"pselect6", "pselect6",
"pwrite64", "pwrite64",
"pwritev", "pwritev",
"pwritev2",
"read", "read",
"readahead", "readahead",
"readlink", "readlink",
@ -403,6 +405,40 @@
"includes": {}, "includes": {},
"excludes": {} "excludes": {}
}, },
{
"names": [
"personality"
],
"action": "SCMP_ACT_ALLOW",
"args": [
{
"index": 0,
"value": 131072,
"valueTwo": 0,
"op": "SCMP_CMP_EQ"
}
],
"comment": "",
"includes": {},
"excludes": {}
},
{
"names": [
"personality"
],
"action": "SCMP_ACT_ALLOW",
"args": [
{
"index": 0,
"value": 131080,
"valueTwo": 0,
"op": "SCMP_CMP_EQ"
}
],
"comment": "",
"includes": {},
"excludes": {}
},
{ {
"names": [ "names": [
"personality" "personality"
@ -422,6 +458,23 @@
}, },
{ {
"names": [ "names": [
"sync_file_range2"
],
"action": "SCMP_ACT_ALLOW",
"args": [],
"comment": "",
"includes": {
"arches": [
"ppc64le"
]
},
"excludes": {}
},
{
"names": [
"arm_fadvise64_64",
"arm_sync_file_range",
"sync_file_range2",
"breakpoint", "breakpoint",
"cacheflush", "cacheflush",
"set_tls" "set_tls"
@ -508,6 +561,7 @@
"mount", "mount",
"name_to_handle_at", "name_to_handle_at",
"perf_event_open", "perf_event_open",
"quotactl",
"setdomainname", "setdomainname",
"sethostname", "sethostname",
"setns", "setns",
@ -671,7 +725,7 @@
"names": [ "names": [
"settimeofday", "settimeofday",
"stime", "stime",
"adjtimex" "clock_settime"
], ],
"action": "SCMP_ACT_ALLOW", "action": "SCMP_ACT_ALLOW",
"args": [], "args": [],
@ -698,4 +752,4 @@
"excludes": {} "excludes": {}
} }
] ]
} }