fn jailer_required_rules() -> Vec<(i64, Vec<seccomp::SeccompRule>)> {
    vec![
        (
            libc::SYS_rt_sigprocmask,
            vec![seccomp::SeccompRule::new(
                vec![],
                seccomp::SeccompAction::Allow,
            )],
        ),
        (
            libc::SYS_rt_sigaction,
            vec![seccomp::SeccompRule::new(
                vec![],
                seccomp::SeccompAction::Allow,
            )],
        ),
        (
            libc::SYS_execve,
            vec![seccomp::SeccompRule::new(
                vec![],
                seccomp::SeccompAction::Allow,
            )],
        ),
        (
            libc::SYS_mmap,
            vec![seccomp::SeccompRule::new(
                vec![],
                seccomp::SeccompAction::Allow,
            )],
        ),
        (
            libc::SYS_arch_prctl,
            vec![seccomp::SeccompRule::new(
                vec![],
                seccomp::SeccompAction::Allow,
            )],
        ),
        (
            libc::SYS_set_tid_address,
            vec![seccomp::SeccompRule::new(
                vec![],
                seccomp::SeccompAction::Allow,
            )],
        ),
        (
            libc::SYS_readlink,
            vec![seccomp::SeccompRule::new(
                vec![],
                seccomp::SeccompAction::Allow,
            )],
        ),
        (
            libc::SYS_open,
            vec![seccomp::SeccompRule::new(
                vec![],
                seccomp::SeccompAction::Allow,
            )],
        ),
        (
            libc::SYS_read,
            vec![seccomp::SeccompRule::new(
                vec![],
                seccomp::SeccompAction::Allow,
            )],
        ),
        (
            libc::SYS_close,
            vec![seccomp::SeccompRule::new(
                vec![],
                seccomp::SeccompAction::Allow,
            )],
        ),
        (
            libc::SYS_brk,
            vec![seccomp::SeccompRule::new(
                vec![],
                seccomp::SeccompAction::Allow,
            )],
        ),
        (
            libc::SYS_sched_getaffinity,
            vec![seccomp::SeccompRule::new(
                vec![],
                seccomp::SeccompAction::Allow,
            )],
        ),
    ]
}
/// Returns a list of rules that allow syscalls required for executing another program.
Returns a list of rules that allow syscalls required for executing another program.
Returns a list of rules that allow syscalls required for executing another program .
fn jailer_required_rules() -> Vec<(i64, Vec<seccomp::SeccompRule>)> {
    vec![
        (
            libc::SYS_rt_sigprocmask,
            vec![seccomp::SeccompRule::new(
                vec![],
                seccomp::SeccompAction::Allow,
            )],
        ),
        (
            libc::SYS_rt_sigaction,
            vec![seccomp::SeccompRule::new(
                vec![],
                seccomp::SeccompAction::Allow,
            )],
        ),
        (
            libc::SYS_execve,
            vec![seccomp::SeccompRule::new(
                vec![],
                seccomp::SeccompAction::Allow,
            )],
        ),
        (
            libc::SYS_mmap,
            vec![seccomp::SeccompRule::new(
                vec![],
                seccomp::SeccompAction::Allow,
            )],
        ),
        (
            libc::SYS_arch_prctl,
            vec![seccomp::SeccompRule::new(
                vec![],
                seccomp::SeccompAction::Allow,
            )],
        ),
        (
            libc::SYS_set_tid_address,
            vec![seccomp::SeccompRule::new(
                vec![],
                seccomp::SeccompAction::Allow,
            )],
        ),
        (
            libc::SYS_readlink,
            vec![seccomp::SeccompRule::new(
                vec![],
                seccomp::SeccompAction::Allow,
            )],
        ),
        (
            libc::SYS_open,
            vec![seccomp::SeccompRule::new(
                vec![],
                seccomp::SeccompAction::Allow,
            )],
        ),
        (
            libc::SYS_read,
            vec![seccomp::SeccompRule::new(
                vec![],
                seccomp::SeccompAction::Allow,
            )],
        ),
        (
            libc::SYS_close,
            vec![seccomp::SeccompRule::new(
                vec![],
                seccomp::SeccompAction::Allow,
            )],
        ),
        (
            libc::SYS_brk,
            vec![seccomp::SeccompRule::new(
                vec![],
                seccomp::SeccompAction::Allow,
            )],
        ),
        (
            libc::SYS_sched_getaffinity,
            vec![seccomp::SeccompRule::new(
                vec![],
                seccomp::SeccompAction::Allow,
            )],
        ),
    ]
}
fn jailer_required_rules ( ) -> Vec < ( i64 , Vec < seccomp :: SeccompRule > ) > { vec ! [ ( libc SYS_rt_sigprocmask vec [ seccomp SeccompRule new ( vec [ ] seccomp SeccompAction Allow ) ] ) ( libc SYS_rt_sigaction vec [ seccomp SeccompRule new ( vec [ ] seccomp SeccompAction Allow ) ] ) ( libc SYS_execve vec [ seccomp SeccompRule new ( vec [ ] seccomp SeccompAction Allow ) ] ) ( libc SYS_mmap vec [ seccomp SeccompRule new ( vec [ ] seccomp SeccompAction Allow ) ] ) ( libc SYS_arch_prctl vec [ seccomp SeccompRule new ( vec [ ] seccomp SeccompAction Allow ) ] ) ( libc SYS_set_tid_address vec [ seccomp SeccompRule new ( vec [ ] seccomp SeccompAction Allow ) ] ) ( libc SYS_readlink vec [ seccomp SeccompRule new ( vec [ ] seccomp SeccompAction Allow ) ] ) ( libc SYS_open vec [ seccomp SeccompRule new ( vec [ ] seccomp SeccompAction Allow ) ] ) ( libc SYS_read vec [ seccomp SeccompRule new ( vec [ ] seccomp SeccompAction Allow ) ] ) ( libc SYS_close vec [ seccomp SeccompRule new ( vec [ ] seccomp SeccompAction Allow ) ] ) ( libc SYS_brk vec [ seccomp SeccompRule new ( vec [ ] seccomp SeccompAction Allow ) ] ) ( libc SYS_sched_getaffinity vec [ seccomp SeccompRule new ( vec [ ] seccomp SeccompAction Allow ) ] ) ] }
Returns a list of rules that allow syscalls required for executing another program.
Returns a list of rules that allow syscalls required for executing another program .