{ "type": "excalidraw", "version": 2, "source": "https://excalidraw.com", "elements": [ { "id": "r632034260", "type": "rectangle", "x": 40, "y": 128, "width": 180, "height": 64, "angle": 0, "strokeColor": "#2f6db5", "backgroundColor": "#eef4fb", "fillStyle": "solid", "strokeWidth": 2, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": { "type": 3 }, "seed": 1453082945, "versionNonce": 63113276, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false }, { "id": "t1253014438", "type": "text", "x": 50, "y": 136, "width": 53.900000000000006, "height": 17.5, "angle": 0, "strokeColor": "#111111", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 1518796973, "versionNonce": 637685170, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "process", "fontSize": 14, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "process", "lineHeight": 1.25, "baseline": 14 }, { "id": "t1171426164", "type": "text", "x": 50, "y": 156, "width": 54.45, "height": 13.75, "angle": 0, "strokeColor": "#555555", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 1951067509, "versionNonce": 1681647388, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "connect()", "fontSize": 11, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "connect()", "lineHeight": 1.25, "baseline": 11 }, { "id": "r1598424805", "type": "rectangle", "x": 300, "y": 118, "width": 240, "height": 84, "angle": 0, "strokeColor": "#e8870c", "backgroundColor": "#fff8ef", "fillStyle": "solid", "strokeWidth": 2, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": { "type": 3 }, "seed": 1750983915, "versionNonce": 1118076827, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false }, { "id": "t950010118", "type": "text", "x": 310, "y": 126, "width": 61.60000000000001, "height": 17.5, "angle": 0, "strokeColor": "#111111", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 1735688083, "versionNonce": 505899512, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "LSM hook", "fontSize": 14, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "LSM hook", "lineHeight": 1.25, "baseline": 14 }, { "id": "t357853800", "type": "text", "x": 310, "y": 146, "width": 139.15, "height": 13.75, "angle": 0, "strokeColor": "#555555", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 1720993341, "versionNonce": 1393969969, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "security_socket_connect", "fontSize": 11, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "security_socket_connect", "lineHeight": 1.25, "baseline": 11 }, { "id": "r1187761489", "type": "rectangle", "x": 630, "y": 68, "width": 210, "height": 56, "angle": 0, "strokeColor": "#111111", "backgroundColor": "#ffffff", "fillStyle": "solid", "strokeWidth": 2, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": { "type": 3 }, "seed": 949455582, "versionNonce": 402011252, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false }, { "id": "t1767472354", "type": "text", "x": 640, "y": 76, "width": 123.20000000000002, "height": 17.5, "angle": 0, "strokeColor": "#111111", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 602030892, "versionNonce": 882537857, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "allow (return 0)", "fontSize": 14, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "allow (return 0)", "lineHeight": 1.25, "baseline": 14 }, { "id": "t899217131", "type": "text", "x": 640, "y": 96, "width": 96.80000000000001, "height": 13.75, "angle": 0, "strokeColor": "#555555", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 419899887, "versionNonce": 1439038502, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "connect proceeds", "fontSize": 11, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "connect proceeds", "lineHeight": 1.25, "baseline": 11 }, { "id": "r1017092792", "type": "rectangle", "x": 630, "y": 168, "width": 210, "height": 56, "angle": 0, "strokeColor": "#111111", "backgroundColor": "#111111", "fillStyle": "solid", "strokeWidth": 2, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": { "type": 3 }, "seed": 226908788, "versionNonce": 49947929, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false }, { "id": "t495706820", "type": "text", "x": 640, "y": 176, "width": 100.10000000000001, "height": 17.5, "angle": 0, "strokeColor": "#ffffff", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 1655461304, "versionNonce": 720969593, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "deny (\u2212EPERM)", "fontSize": 14, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "deny (\u2212EPERM)", "lineHeight": 1.25, "baseline": 14 }, { "id": "t20112722", "type": "text", "x": 640, "y": 196, "width": 90.75000000000001, "height": 13.75, "angle": 0, "strokeColor": "#555555", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 1767194628, "versionNonce": 493652235, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "connect blocked", "fontSize": 11, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "connect blocked", "lineHeight": 1.25, "baseline": 11 }, { "id": "a1156230456", "type": "arrow", "x": 220, "y": 160, "width": 80, "height": 0, "angle": 0, "strokeColor": "#555555", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 2, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": { "type": 2 }, "seed": 981746418, "versionNonce": 1777658782, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "points": [ [ 0, 0 ], [ 80, 0 ] ], "lastCommittedPoint": null, "startBinding": null, "endBinding": null, "startArrowhead": null, "endArrowhead": "arrow" }, { "id": "t286507917", "type": "text", "x": 260.0, "y": 146.0, "width": 42.35, "height": 13.75, "angle": 0, "strokeColor": "#555555", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 556082920, "versionNonce": 1463737291, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "syscall", "fontSize": 11, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "syscall", "lineHeight": 1.25, "baseline": 11 }, { "id": "a811651924", "type": "arrow", "x": 540, "y": 150, "width": 90, "height": 54, "angle": 0, "strokeColor": "#555555", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 2, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": { "type": 2 }, "seed": 1150517212, "versionNonce": 696888427, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "points": [ [ 0, 0 ], [ 90, -54 ] ], "lastCommittedPoint": null, "startBinding": null, "endBinding": null, "startArrowhead": null, "endArrowhead": "arrow" }, { "id": "t1930644038", "type": "text", "x": 585.0, "y": 109.0, "width": 54.45, "height": 13.75, "angle": 0, "strokeColor": "#555555", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 1258361945, "versionNonce": 1257507783, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "cgroup OK", "fontSize": 11, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "cgroup OK", "lineHeight": 1.25, "baseline": 11 }, { "id": "a1556540308", "type": "arrow", "x": 540, "y": 172, "width": 90, "height": 24, "angle": 0, "strokeColor": "#b8650a", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 2, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": { "type": 2 }, "seed": 1003116662, "versionNonce": 1062154254, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "points": [ [ 0, 0 ], [ 90, 24 ] ], "lastCommittedPoint": null, "startBinding": null, "endBinding": null, "startArrowhead": null, "endArrowhead": "arrow" }, { "id": "t849146693", "type": "text", "x": 585.0, "y": 170.0, "width": 90.75000000000001, "height": 13.75, "angle": 0, "strokeColor": "#b8650a", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 717767268, "versionNonce": 731649816, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "confined cgroup", "fontSize": 11, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "confined cgroup", "lineHeight": 1.25, "baseline": 11 }, { "id": "t1165284557", "type": "text", "x": 440, "y": 24, "width": 447.70000000000005, "height": 13.75, "angle": 0, "strokeColor": "#b8650a", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 1310373232, "versionNonce": 1615802596, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "the LSM program's return value DECIDES: 0 allows, negative denies (\u2212EPERM)", "fontSize": 11, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "the LSM program's return value DECIDES: 0 allows, negative denies (\u2212EPERM)", "lineHeight": 1.25, "baseline": 11 }, { "id": "t1409495197", "type": "text", "x": 440, "y": 294, "width": 417.45000000000005, "height": 13.75, "angle": 0, "strokeColor": "#888888", "backgroundColor": "transparent", "fillStyle": "solid", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 1, "opacity": 100, "groupIds": [], "frameId": null, "roundness": null, "seed": 710857935, "versionNonce": 373103308, "isDeleted": false, "boundElements": [], "updated": 1, "link": null, "locked": false, "text": "scoped by cgroup id \u2014 confine one container, leave the host untouched", "fontSize": 11, "fontFamily": 1, "textAlign": "left", "verticalAlign": "top", "containerId": null, "originalText": "scoped by cgroup id \u2014 confine one container, leave the host untouched", "lineHeight": 1.25, "baseline": 11 } ], "appState": { "viewBackgroundColor": "#ffffff", "gridSize": null }, "files": {} }