Re-align the system-probe seccomp profile with what’s in the public h…

…elm chart (#74)
DataDog · Apr 10, 2020 · d3e21a5 · d3e21a5
1 parent 5531756
commit d3e21a5
Showing 1 changed file with 19 additions and 1 deletion.
diff --git a/pkg/controller/datadogagent/systemprobe.go b/pkg/controller/datadogagent/systemprobe.go
@@ -95,13 +95,15 @@ const systemProbeSecCompData = `{
 		{
 		"names": [
 			"accept4",
+			"access",
 			"arch_prctl",
 			"bind",
 			"bpf",
 			"brk",
 			"capget",
 			"capset",
 			"chdir",
+			"clock_gettime",
 			"clone",
 			"close",
 			"connect",
@@ -130,11 +132,15 @@ const systemProbeSecCompData = `{
 			"fcntl",
 			"fcntl64",
 			"fstat",
-			"fstatfs",
 			"fstat64",
+			"fstatfs",
 			"fsync",
 			"futex",
+			"getcwd",
 			"getdents",
+			"getegid",
+			"geteuid",
+			"getgid",
 			"getdents64",
 			"getpeername",
 			"getpid",
@@ -152,10 +158,12 @@ const systemProbeSecCompData = `{
 			"getsockopt",
 			"gettid",
 			"gettimeofday",
+			"getuid",
 			"getxattr",
 			"ioctl",
 			"ipc",
 			"listen",
+			"lseek",
 			"lstat",
 			"lstat64",
 			"mkdir",
@@ -176,10 +184,14 @@ const systemProbeSecCompData = `{
 			"ppoll",
 			"prctl",
 			"prlimit64",
+			"pselect6",
 			"read",
+			"readlink",
+			"readlinkat",
 			"recvfrom",
 			"recvmmsg",
 			"recvmsg",
+			"rename",
 			"restart_syscall",
 			"rmdir",
 			"rt_sigaction",
@@ -190,17 +202,22 @@ const systemProbeSecCompData = `{
 			"rt_sigsuspend",
 			"rt_sigtimedwait",
 			"rt_tgsigqueueinfo",
+			"sched_getaffinity",
+			"sched_yield",
 			"seccomp",
 			"select",
 			"semtimedop",
 			"send",
 			"sendmmsg",
 			"sendmsg",
 			"sendto",
+			"set_robust_list",
+			"set_tid_address",
 			"setgid",
 			"setgid32",
 			"setgroups",
 			"setgroups32",
+			"setns",
 			"setrlimit",
 			"setsid",
 			"setsidaccept4",
@@ -214,6 +231,7 @@ const systemProbeSecCompData = `{
 			"stat",
 			"stat64",
 			"statfs",
+			"sysinfo",
 			"umask",
 			"uname",
 			"unlink",