apiVersion: security-profiles-operator.x-k8s.io/v1beta1
kind: SeccompProfile
metadata: # removed
spec:
  architectures:
  - SCMP_ARCH_X86_64
  defaultAction: SCMP_ACT_ERRNO
  disabled: false
  syscalls:
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone3
    - close
    - connect
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - flock
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - sigaltstack
    - socket
    - sysinfo
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - clock_nanosleep
    - close
    - connect
    - epoll_ctl
    - epoll_wait
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getdents64
    - getpeername
    - getpid
    - getrandom
    - getsockname
    - getsockopt
    - gettid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - poll
    - pread64
    - prlimit64
    - read
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigreturn
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - socket
    - tgkill
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - flock
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - sigaltstack
    - socket
    - sysinfo
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - bind
    - brk
    - chdir
    - clock_gettime
    - close
    - connect
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - getuid
    - ioctl
    - lseek
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sendmmsg
    - sendto
    - setsockopt
    - socket
    - timer_settime
    - vfork
    - wait4
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - capget
    - chdir
    - clock_gettime
    - clock_nanosleep
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - epoll_wait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - pkey_alloc
    - pread64
    - prlimit64
    - read
    - readlink
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - statx
    - sysinfo
    - tgkill
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone3
    - close
    - connect
    - exit
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - bind
    - brk
    - clock_gettime
    - close
    - connect
    - fcntl
    - futex
    - getdents64
    - getpeername
    - getpid
    - getsockname
    - getsockopt
    - ioctl
    - lseek
    - mmap
    - mprotect
    - newfstatat
    - openat
    - poll
    - ppoll
    - read
    - recvfrom
    - recvmsg
    - rt_sigreturn
    - sched_yield
    - sendmmsg
    - sendto
    - setsockopt
    - socket
    - timer_settime
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - bind
    - brk
    - clock_gettime
    - clone3
    - close
    - connect
    - exit
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - flock
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - uname
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone3
    - close
    - connect
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - poll
    - ppoll
    - prctl
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - sched_getaffinity
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - sigaltstack
    - socket
    - uname
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone3
    - close
    - connect
    - exit
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - flock
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - bind
    - brk
    - clock_gettime
    - clone3
    - close
    - connect
    - exit
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - flock
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - brk
    - chdir
    - clock_gettime
    - clone3
    - close
    - connect
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - gettid
    - getuid
    - ioctl
    - lseek
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - read
    - readlink
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - set_robust_list
    - sigaltstack
    - socket
    - sysinfo
    - timer_settime
    - vfork
    - wait4
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - flock
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - clock_nanosleep
    - close
    - connect
    - epoll_ctl
    - epoll_wait
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getdents64
    - getpeername
    - getpid
    - getrandom
    - getsockname
    - getsockopt
    - gettid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - poll
    - pread64
    - prlimit64
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigreturn
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - socket
    - stat
    - tgkill
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - flock
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - bind
    - brk
    - chdir
    - clock_gettime
    - close
    - connect
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_yield
    - sendmmsg
    - sendto
    - setsockopt
    - shutdown
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - arch_prctl
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - read
    - readlink
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - set_robust_list
    - set_tid_address
    - sigaltstack
    - socket
    - sysinfo
    - timer_create
    - uname
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - flock
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone3
    - close
    - connect
    - exit
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - bind
    - brk
    - clock_gettime
    - clone3
    - close
    - connect
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - sigaltstack
    - socket
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - epoll_wait
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getrlimit
    - getrusage
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - capget
    - chdir
    - clock_gettime
    - clock_nanosleep
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - epoll_wait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - pkey_alloc
    - poll
    - pread64
    - prlimit64
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - stat
    - statx
    - sysinfo
    - tgkill
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - bind
    - brk
    - clock_gettime
    - close
    - connect
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getsockname
    - getsockopt
    - getuid
    - ioctl
    - lseek
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - poll
    - ppoll
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_yield
    - sendmmsg
    - sendto
    - setsockopt
    - shutdown
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - flock
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - clock_gettime
    - clock_nanosleep
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_wait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getrusage
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_settime
    - uname
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - bind
    - brk
    - clock_gettime
    - clone3
    - close
    - connect
    - exit
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone3
    - close
    - connect
    - exit
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone3
    - close
    - connect
    - exit
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone3
    - close
    - connect
    - exit
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone3
    - close
    - connect
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clock_nanosleep
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_wait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getrusage
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - brk
    - capget
    - chdir
    - clock_nanosleep
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - epoll_wait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - pkey_alloc
    - pread64
    - prlimit64
    - read
    - readlink
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - statx
    - sysinfo
    - tgkill
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clock_nanosleep
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - epoll_wait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getrusage
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - socketpair
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - flock
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - flock
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone3
    - close
    - connect
    - exit
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone3
    - close
    - connect
    - exit
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - flock
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - bind
    - brk
    - clock_gettime
    - clone3
    - close
    - connect
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clock_nanosleep
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - epoll_wait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getrusage
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone3
    - close
    - connect
    - exit
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - bind
    - brk
    - clock_gettime
    - clone3
    - close
    - connect
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clock_nanosleep
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - epoll_wait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getrusage
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone3
    - close
    - connect
    - exit
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone3
    - close
    - connect
    - exit
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - sigaltstack
    - socket
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - clock_gettime
    - clone3
    - close
    - connect
    - epoll_ctl
    - execve
    - exit
    - exit_group
    - fcntl
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone3
    - close
    - connect
    - exit
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone3
    - close
    - connect
    - exit
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - flock
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - bind
    - brk
    - clock_gettime
    - clone3
    - close
    - connect
    - exit
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - sigaltstack
    - socket
    - sysinfo
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clock_nanosleep
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_wait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getrusage
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - socketpair
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clock_nanosleep
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - epoll_wait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getrusage
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone3
    - close
    - connect
    - exit
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - bind
    - brk
    - clock_gettime
    - clone3
    - close
    - connect
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - sigaltstack
    - socket
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - flock
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clock_nanosleep
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - epoll_wait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getrusage
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - capget
    - chdir
    - clock_gettime
    - clock_nanosleep
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - epoll_wait
    - eventfd2
    - execve
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - pkey_alloc
    - poll
    - pread64
    - prlimit64
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - stat
    - statx
    - sysinfo
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone3
    - close
    - connect
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - bind
    - brk
    - clock_gettime
    - clone3
    - close
    - connect
    - exit
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigprocmask
    - sched_getaffinity
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - sigaltstack
    - socket
    - uname
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_wait
    - exit
    - fcntl
    - futex
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getrusage
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigprocmask
    - sched_getaffinity
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - socketpair
    - uname
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - clock_nanosleep
    - close
    - connect
    - epoll_ctl
    - epoll_wait
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getdents64
    - getpeername
    - getpid
    - getrandom
    - getsockname
    - getsockopt
    - gettid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - poll
    - pread64
    - prlimit64
    - read
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigreturn
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - socket
    - tgkill
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - capget
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - epoll_wait
    - eventfd2
    - execve
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - pkey_alloc
    - poll
    - pread64
    - prlimit64
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - stat
    - statx
    - sysinfo
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - capget
    - chdir
    - clock_gettime
    - clock_nanosleep
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - epoll_wait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - pkey_alloc
    - pread64
    - prlimit64
    - read
    - readlink
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - statx
    - sysinfo
    - tgkill
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - sigaltstack
    - socket
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - clock_gettime
    - close
    - futex
    - getpid
    - mprotect
    - ppoll
    - read
    - rt_sigaction
    - shutdown
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone3
    - close
    - connect
    - exit
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - clock_gettime
    - clock_nanosleep
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_wait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getpeername
    - getpid
    - getrandom
    - getrusage
    - getsockname
    - getsockopt
    - gettid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - bind
    - brk
    - clock_gettime
    - clone3
    - close
    - connect
    - exit
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - sigaltstack
    - socket
    - sysinfo
    - timer_create
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - bind
    - brk
    - clock_gettime
    - clone3
    - close
    - connect
    - exit
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - flock
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - arch_prctl
    - brk
    - chdir
    - clock_gettime
    - clone
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - prctl
    - pread64
    - prlimit64
    - read
    - readlink
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - set_robust_list
    - set_tid_address
    - sigaltstack
    - socket
    - sysinfo
    - timer_create
    - uname
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone3
    - close
    - connect
    - exit
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - flock
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - uname
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone3
    - close
    - connect
    - exit
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone3
    - close
    - connect
    - exit
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - arch_prctl
    - chdir
    - clock_gettime
    - clone
    - close
    - epoll_create1
    - epoll_ctl
    - epoll_wait
    - execve
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getdents64
    - getpid
    - getrlimit
    - gettid
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - read
    - readlink
    - rt_sigaction
    - rt_sigprocmask
    - sched_getaffinity
    - setsockopt
    - shutdown
    - sigaltstack
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clock_nanosleep
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - epoll_wait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getrlimit
    - getrusage
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - socketpair
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone3
    - close
    - connect
    - exit
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - sigaltstack
    - socket
    - sysinfo
    - timer_create
    - uname
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - flock
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - mremap
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_ctl
    - execve
    - exit_group
    - fcntl
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - sigaltstack
    - socket
    - sysinfo
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - bind
    - brk
    - clock_gettime
    - clone3
    - close
    - connect
    - exit
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_ctl
    - execve
    - exit
    - exit_group
    - fcntl
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - flock
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - bind
    - brk
    - clock_gettime
    - clone3
    - close
    - connect
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - flock
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - bind
    - brk
    - clock_gettime
    - clone3
    - close
    - connect
    - exit_group
    - fcntl
    - flock
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clock_nanosleep
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - epoll_wait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getrusage
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - socketpair
    - sysinfo
    - tgkill
    - timer_create
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - brk
    - chdir
    - clock_nanosleep
    - clone
    - close
    - epoll_create1
    - epoll_ctl
    - epoll_wait
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getdents64
    - getpid
    - getrandom
    - getrlimit
    - gettid
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - pread64
    - prlimit64
    - read
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - tgkill
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - bind
    - brk
    - chdir
    - clock_gettime
    - close
    - connect
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getsockname
    - getsockopt
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - poll
    - ppoll
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - sendmmsg
    - sendto
    - setsockopt
    - shutdown
    - socket
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - capget
    - chdir
    - clock_gettime
    - clock_nanosleep
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - epoll_wait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - pkey_alloc
    - poll
    - pread64
    - prlimit64
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - stat
    - statx
    - sysinfo
    - tgkill
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - capget
    - chdir
    - clock_gettime
    - clock_nanosleep
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - epoll_wait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - pkey_alloc
    - poll
    - pread64
    - prlimit64
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - stat
    - statx
    - sysinfo
    - tgkill
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - flock
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - sigaltstack
    - socket
    - sysinfo
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - sigaltstack
    - socket
    - sysinfo
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - flock
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone3
    - close
    - connect
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - bind
    - brk
    - clock_gettime
    - close
    - connect
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getpeername
    - getpid
    - getrandom
    - getsockname
    - getsockopt
    - ioctl
    - lseek
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - poll
    - ppoll
    - read
    - recvfrom
    - recvmsg
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_yield
    - sendmmsg
    - sendto
    - setsockopt
    - shutdown
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - bind
    - brk
    - clock_gettime
    - close
    - connect
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getsockname
    - getsockopt
    - getuid
    - ioctl
    - lseek
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - poll
    - ppoll
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_yield
    - sendmmsg
    - sendto
    - setsockopt
    - shutdown
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - brk
    - chdir
    - clock_nanosleep
    - clone
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - epoll_wait
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - pread64
    - prlimit64
    - read
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone3
    - close
    - connect
    - exit
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone3
    - close
    - connect
    - exit
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone3
    - close
    - connect
    - epoll_ctl
    - execve
    - exit_group
    - fcntl
    - flock
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - sigaltstack
    - socket
    - sysinfo
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - bind
    - brk
    - clock_gettime
    - clone3
    - close
    - connect
    - exit
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clock_nanosleep
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - epoll_wait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getrusage
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - socketpair
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - clock_gettime
    - clock_nanosleep
    - clone3
    - close
    - connect
    - epoll_ctl
    - epoll_wait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getpeername
    - getpid
    - getrandom
    - getrusage
    - getsockname
    - getsockopt
    - gettid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - sigaltstack
    - socket
    - sysinfo
    - timer_create
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - bind
    - brk
    - clock_gettime
    - clone3
    - close
    - connect
    - exit
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - sigaltstack
    - socket
    - sysinfo
    - timer_create
    - uname
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - fcntl
    - flock
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone3
    - close
    - connect
    - exit_group
    - fcntl
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - mmap
    - mprotect
    - munmap
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - arch_prctl
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - read
    - readlink
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - set_robust_list
    - set_tid_address
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - uname
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mkdir
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - open
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - socketpair
    - stat
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - unlink
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - uname
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - execve
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - listen
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - tgkill
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - fcntl
    - flock
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - sigaltstack
    - socket
    - sysinfo
    - timer_create
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
  - action: SCMP_ACT_ALLOW
    names:
    - accept4
    - access
    - arch_prctl
    - bind
    - brk
    - chdir
    - clock_gettime
    - clone
    - clone3
    - close
    - connect
    - epoll_create1
    - epoll_ctl
    - epoll_pwait
    - eventfd2
    - execve
    - exit
    - exit_group
    - fcntl
    - fstat
    - fstatfs
    - futex
    - getcwd
    - getdents64
    - getegid
    - geteuid
    - getgid
    - getpeername
    - getpgrp
    - getpid
    - getppid
    - getrandom
    - getresgid
    - getresuid
    - getrlimit
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - ioctl
    - lseek
    - madvise
    - mmap
    - mprotect
    - mremap
    - munmap
    - nanosleep
    - newfstatat
    - openat
    - pipe2
    - poll
    - ppoll
    - prctl
    - pread64
    - prlimit64
    - pselect6
    - read
    - readlink
    - recvfrom
    - recvmsg
    - rseq
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendmmsg
    - sendto
    - set_robust_list
    - set_tid_address
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - sysinfo
    - tgkill
    - timer_create
    - timer_delete
    - timer_settime
    - uname
    - vfork
    - wait4
    - waitid
    - write
    - writev