-name: "busybox-with-execveat"
-description: "An example/demo policy which allows to execute /bin/busybox in an empty (only /proc) "
-description: "mount namespace which doesn't even include busybox itself."
+name: "static-busybox-with-execveat"
+description: "An example/demo policy which allows to execute /bin/busybox-static in an "
+description: "empty (only /proc) mount namespace which doesn't even include busybox itself"
mode: ONCE
hostname: "BUSYBOX"
seccomp_string: "POLICY example { "
seccomp_string: " ERRNO(0) { ptrace } "
seccomp_string: "} "
-seccomp_string: "USE example DEFAULT ALLOW"
+seccomp_string: "USE example DEFAULT ALLOW "
exec_bin {
path: "/bin/busybox"