nordisk/heimdall

profiles/heimdall-wasm-host/x86_64-glibc.oci.json

{
  "architectures": [
    "SCMP_ARCH_X86_64"
  ],
  "defaultAction": "SCMP_ACT_KILL_PROCESS",
  "syscalls": [
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "access"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "arch_prctl"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "brk"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "clock_nanosleep"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "args": [
        {
          "index": 0,
          "op": "SCMP_CMP_MASKED_EQ",
          "value": 18446744073705550079,
          "valueTwo": 0
        }
      ],
      "names": [
        "clone"
      ]
    },
    {
      "action": "SCMP_ACT_ERRNO",
      "errnoRet": 38,
      "names": [
        "clone3"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "close"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "exit"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "exit_group"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "fstat"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "fsync"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "futex"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "getdents64"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "getrandom"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "gettid"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "lseek"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "madvise"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "mkdir"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "args": [
        {
          "index": 2,
          "op": "SCMP_CMP_MASKED_EQ",
          "value": 4294967295,
          "valueTwo": 0
        }
      ],
      "names": [
        "mmap"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "args": [
        {
          "index": 2,
          "op": "SCMP_CMP_MASKED_EQ",
          "value": 4294967295,
          "valueTwo": 1
        }
      ],
      "names": [
        "mmap"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "args": [
        {
          "index": 2,
          "op": "SCMP_CMP_MASKED_EQ",
          "value": 4294967295,
          "valueTwo": 3
        }
      ],
      "names": [
        "mmap"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "args": [
        {
          "index": 2,
          "op": "SCMP_CMP_MASKED_EQ",
          "value": 4294967295,
          "valueTwo": 5
        }
      ],
      "names": [
        "mmap"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "args": [
        {
          "index": 2,
          "op": "SCMP_CMP_MASKED_EQ",
          "value": 4294967295,
          "valueTwo": 0
        }
      ],
      "names": [
        "mprotect"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "args": [
        {
          "index": 2,
          "op": "SCMP_CMP_MASKED_EQ",
          "value": 4294967295,
          "valueTwo": 1
        }
      ],
      "names": [
        "mprotect"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "args": [
        {
          "index": 2,
          "op": "SCMP_CMP_MASKED_EQ",
          "value": 4294967295,
          "valueTwo": 3
        }
      ],
      "names": [
        "mprotect"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "args": [
        {
          "index": 2,
          "op": "SCMP_CMP_MASKED_EQ",
          "value": 4294967295,
          "valueTwo": 5
        }
      ],
      "names": [
        "mprotect"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "mremap"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "munmap"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "args": [
        {
          "index": 2,
          "op": "SCMP_CMP_MASKED_EQ",
          "value": 4294244158,
          "valueTwo": 0
        }
      ],
      "names": [
        "openat"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "poll"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "args": [
        {
          "index": 0,
          "op": "SCMP_CMP_MASKED_EQ",
          "value": 4294967295,
          "valueTwo": 15
        }
      ],
      "names": [
        "prctl"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "pread64"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "prlimit64"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "read"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "rseq"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "rt_sigaction"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "rt_sigprocmask"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "rt_sigreturn"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "sched_getaffinity"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "sched_yield"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "set_robust_list"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "set_tid_address"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "sigaltstack"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "statx"
      ]
    },
    {
      "action": "SCMP_ACT_ALLOW",
      "names": [
        "write"
      ]
    }
  ]
}