seccomp:
  default_action: errno
  syscalls:
  - names:
    - accept
    - accept4
    - arch_prctl
    - bind
    - brk
    - clone
    - close
    - connect
    - dup
    - epoll_create
    - epoll_create1
    - epoll_ctl
    - epoll_wait
    - exit
    - exit_group
    - fchdir
    - fchmod
    - fchown
    - fcntl
    - fdatasync
    - flock
    - fstat
    - fsync
    - ftruncate
    - futex
    - getcwd
    - getdents64
    - geteuid
    - getgid
    - getpeername
    - getpid
    - getrandom
    - getrusage
    - getsockname
    - getsockopt
    - gettid
    - getuid
    - inotify_add_watch
    - inotify_init1
    - inotify_rm_watch
    - ioctl
    - kill
    - listen
    - lseek
    - lstat
    - madvise
    - mincore
    - mkdirat
    - mmap
    - munmap
    - open
    - openat
    - pipe2
    - prctl
    - pread64
    - pselect6
    - pwrite64
    - read
    - readlinkat
    - recvfrom
    - recvmsg
    - renameat
    - rt_sigaction
    - rt_sigprocmask
    - rt_sigreturn
    - sched_getaffinity
    - sched_yield
    - sendfile
    - sendmsg
    - sendto
    - setitimer
    - setsockopt
    - shutdown
    - sigaltstack
    - socket
    - stat
    - tkill
    - uname
    - unlinkat
    - write
    - writev
    action: allow