{
  "_说明": "系统调用监控配置文件",
  "_字段说明": {
    "syscalls": "需要追踪的系统调用名称列表，可在 Web 界面的“配置”页动态增删"
  },
  "_常用系统调用参考": {
    "openat": "打开文件",
    "read": "读取文件",
    "write": "写入文件",
    "execve": "执行程序",
    "close": "关闭文件描述符"
  },
  "syscalls": ["openat", "read", "write", "execve", "close"]
}