mirror_lxc/doc/examples/seccomp-v2-denylist.conf
Christian Brauner 78522aa936
seccomp: support allowlist/denylist in profiles
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
2020-07-03 13:18:36 +02:00

9 lines
332 B
Plaintext

2
denylist
# v2 allows comments after the second line, with '#' in first column,
# denylist will allow syscalls by default
# if 'errno 0' was not appended to 'mknod' below, then the task would
# simply be killed when it tried to mknod. 'errno 0' means do not allow
# the container to mknod, but immediately return 0.
mknod errno 0