1{
2  "defaultAction": "SCMP_ACT_ERRNO",
3  "syscalls": [
4    {
5      "names": ["chmod"],
6      "action": "SCMP_ACT_ALLOW"
7    },
8    {
9      "names": ["syslog"],
10      "action": "SCMP_ACT_ALLOW",
11      "includes": {
12        "caps": ["CAP_SYSLOG"]
13      }
14    },
15    {
16      "names": ["ptrace"],
17      "action": "SCMP_ACT_ALLOW",
18      "excludes": {
19        "caps": ["CAP_SYS_ADMIN"]
20      }
21    }
22  ]
23}
24