Skip to content

Commit 06ea960

Browse files
committed
docs: update seccomp documentation with Podman example link
Replace outdated TODO comment with accurate information about runc's seccomp support. Add reference to Podman's default seccomp profile as an example. This provides users with a practical starting point for creating custom seccomp configurations. Signed-off-by: Osama Abdelkader <osama.abdelkader@gmail.com>
1 parent 7d81b21 commit 06ea960

File tree

1 file changed

+6
-1
lines changed

1 file changed

+6
-1
lines changed

libcontainer/SPEC.md

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -367,7 +367,12 @@ profile <profile_name> flags=(attach_disconnected,mediate_deleted) {
367367
}
368368
```
369369

370-
*TODO: seccomp work is being done to find a good default config*
370+
*Seccomp filtering is supported, users can provide their own seccomp profile*
371+
372+
**Example seccomp profile:**
373+
An example seccomp profile based on Podman's default configuration is available at:https://github.com/containers/common/blob/main/pkg/seccomp/seccomp.json
374+
375+
This profile can be used as a starting point for creating custom seccomp configurations.
371376

372377
### Runtime and Init Process
373378

0 commit comments

Comments
 (0)