Sample Conjur seccomp profile (default profile with `keyctl` enabled, which provides access to underlying kernel keychain)

sample_comjur_seccomp_profile.json

{
	"description": "Default Docker seccomp profile, plus keyctl calls (required by Conjur)",
	"comment": "Run with `docker run --security seccomp:path/to/seccomp.json` to use it.",
	"defaultAction": "SCMP_ACT_ERRNO",
	"architectures": [
		"SCMP_ARCH_X86_64",
		"SCMP_ARCH_X86",
		"SCMP_ARCH_X32"
	],
	"syscalls": [{
			"name": "accept",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "accept4",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "access",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "alarm",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "arch_prctl",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "bind",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "brk",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "capget",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "capset",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "chdir",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "chmod",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "chown",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "chown32",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "chroot",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "clock_getres",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "clock_gettime",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "clock_nanosleep",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "clone",
			"action": "SCMP_ACT_ALLOW",
			"args": [{
				"index": 0,
				"value": 2080505856,
				"valueTwo": 0,
				"op": "SCMP_CMP_MASKED_EQ"
			}]
		},
		{
			"name": "close",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "connect",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "copy_file_range",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "creat",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "dup",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "dup2",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "dup3",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "epoll_create",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "epoll_create1",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "epoll_ctl",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "epoll_ctl_old",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "epoll_pwait",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "epoll_wait",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "epoll_wait_old",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "eventfd",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "eventfd2",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "execve",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "execveat",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "exit",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "exit_group",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "faccessat",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "fadvise64",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "fadvise64_64",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "fallocate",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "fanotify_init",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "fanotify_mark",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "fchdir",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "fchmod",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "fchmodat",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "fchown",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "fchown32",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "fchownat",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "fcntl",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "fcntl64",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "fdatasync",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "fgetxattr",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "flistxattr",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "flock",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "fork",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "fremovexattr",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "fsetxattr",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "fstat",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "fstat64",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "fstatat64",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "fstatfs",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "fstatfs64",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "fsync",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "ftruncate",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "ftruncate64",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "futex",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "futimesat",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "getcpu",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "getcwd",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "getdents",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "getdents64",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "getegid",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "getegid32",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "geteuid",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "geteuid32",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "getgid",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "getgid32",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "getgroups",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "getgroups32",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "getitimer",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "getpeername",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "getpgid",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "getpgrp",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "getpid",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "getppid",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "getpriority",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "getrandom",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "getresgid",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "getresgid32",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "getresuid",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "getresuid32",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "getrlimit",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "get_robust_list",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "getrusage",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "getsid",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "getsockname",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "getsockopt",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "get_thread_area",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "gettid",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "gettimeofday",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "getuid",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "getuid32",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "getxattr",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "inotify_add_watch",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "inotify_init",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "inotify_init1",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "inotify_rm_watch",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "io_cancel",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "ioctl",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "io_destroy",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "io_getevents",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "ioprio_get",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "ioprio_set",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "io_setup",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "io_submit",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "ipc",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "keyctl",
			"action": "SCMP_ACT_ALLOW",
			"args": [],
			"comment": "required by Conjur appliance"
		},
		{
			"name": "kill",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "lchown",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "lchown32",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "lgetxattr",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "link",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "linkat",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "listen",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "listxattr",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "llistxattr",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "_llseek",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "lremovexattr",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "lseek",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "lsetxattr",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "lstat",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "lstat64",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "madvise",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "memfd_create",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "mincore",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "mkdir",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "mkdirat",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "mknod",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "mknodat",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "mlock",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "mlock2",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "mlockall",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "mmap",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "mmap2",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "mprotect",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "mq_getsetattr",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "mq_notify",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "mq_open",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "mq_timedreceive",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "mq_timedsend",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "mq_unlink",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "mremap",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "msgctl",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "msgget",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "msgrcv",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "msgsnd",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "msync",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "munlock",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "munlockall",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "munmap",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "nanosleep",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "newfstatat",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "_newselect",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "open",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "openat",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "pause",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "personality",
			"action": "SCMP_ACT_ALLOW",
			"args": [{
				"index": 0,
				"value": 0,
				"valueTwo": 0,
				"op": "SCMP_CMP_EQ"
			}]
		},
		{
			"name": "personality",
			"action": "SCMP_ACT_ALLOW",
			"args": [{
				"index": 0,
				"value": 8,
				"valueTwo": 0,
				"op": "SCMP_CMP_EQ"
			}]
		},
		{
			"name": "personality",
			"action": "SCMP_ACT_ALLOW",
			"args": [{
				"index": 0,
				"value": 4294967295,
				"valueTwo": 0,
				"op": "SCMP_CMP_EQ"
			}]
		},
		{
			"name": "pipe",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "pipe2",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "poll",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "ppoll",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "prctl",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "pread64",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "preadv",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "prlimit64",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "pselect6",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "pwrite64",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "pwritev",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "read",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "readahead",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "readlink",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "readlinkat",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "readv",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "recv",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "recvfrom",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "recvmmsg",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "recvmsg",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "remap_file_pages",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "removexattr",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "rename",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "renameat",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "renameat2",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "restart_syscall",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "rmdir",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "rt_sigaction",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "rt_sigpending",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "rt_sigprocmask",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "rt_sigqueueinfo",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "rt_sigreturn",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "rt_sigsuspend",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "rt_sigtimedwait",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "rt_tgsigqueueinfo",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "sched_getaffinity",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "sched_getattr",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "sched_getparam",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "sched_get_priority_max",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "sched_get_priority_min",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "sched_getscheduler",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "sched_rr_get_interval",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "sched_setaffinity",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "sched_setattr",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "sched_setparam",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "sched_setscheduler",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "sched_yield",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "seccomp",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "select",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "semctl",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "semget",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "semop",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "semtimedop",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "send",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "sendfile",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "sendfile64",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "sendmmsg",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "sendmsg",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "sendto",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "setdomainname",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "setfsgid",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "setfsgid32",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "setfsuid",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "setfsuid32",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "setgid",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "setgid32",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "setgroups",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "setgroups32",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "sethostname",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "setitimer",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "setpgid",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "setpriority",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "setregid",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "setregid32",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "setresgid",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "setresgid32",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "setresuid",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "setresuid32",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "setreuid",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "setreuid32",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "setrlimit",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "set_robust_list",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "setsid",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "setsockopt",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "set_thread_area",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "set_tid_address",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "setuid",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "setuid32",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "setxattr",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "shmat",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "shmctl",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "shmdt",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "shmget",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "shutdown",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "sigaltstack",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "signalfd",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "signalfd4",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "sigreturn",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "socket",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "socketpair",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "splice",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "stat",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "stat64",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "statfs",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "statfs64",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "symlink",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "symlinkat",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "sync",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "sync_file_range",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "syncfs",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "sysinfo",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "syslog",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "tee",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "tgkill",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "time",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "timer_create",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "timer_delete",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "timerfd_create",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "timerfd_gettime",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "timerfd_settime",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "timer_getoverrun",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "timer_gettime",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "timer_settime",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "times",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "tkill",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "truncate",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "truncate64",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "ugetrlimit",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "umask",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "uname",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "unlink",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "unlinkat",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "utime",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "utimensat",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "utimes",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "vfork",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "vhangup",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "vmsplice",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "wait4",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "waitid",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "waitpid",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "write",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "writev",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "modify_ldt",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "breakpoint",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "cacheflush",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		},
		{
			"name": "set_tls",
			"action": "SCMP_ACT_ALLOW",
			"args": []
		}
	]
}