-
**Is your feature request related to a problem? Please describe**.
Improve zero day exploit protections for containers running untrusted code
**Describe the solution you'd like**.
Ability t…
-
Docker now has the ability to set seccomp profiles on a container (https://github.com/docker/docker/pull/17989),
however, writing a custom profile can be tedious, and leads to a lot
of repetition if…
-
### Type of issue
Outdated article
### Feedback
This page mentions the following as part of the _Secure computing_ section:
_Seccomp is also a Linux kernel security module, and is natively suppo…
-
**This is a design limitation, without an immediate fix.**
## Summary
(Rewritten for clarity)
- Users of cdxgen are known to run the tool against both trusted and untrusted codebases
- cdxgen …
-
### Is your feature request related to a problem? Please describe.
1. You can not add system-wide overrides for .profile/.inc files
2. You normally should not modify installed .profile files, movi…
-
I think we need to rework the approach towards seccomp because the stub workaround I came up earlier this year in opencontainers/runc#2750 seems to not be doing a great job of solving the problem (may…
-
The advise gadgets capture events and suggest different configurations. We should also support them as image-based gadgets.
This support requires two different things:
- access contents from ebpf…
-
### Kyverno Version
1.12.5
### Description
I'am able to fetch the container name from the 'disallow-capabilities-strict policy on the playground. You can view it [here]: [https://playground…
-
## Issue description
Unable to use seccomp profiles with docker
## Steps to reproduce
### download default seccomp profile and try to run it
``` sh
wget https://raw.githubusercontent.com/…
-
First of all, great project, love it. I built a similar proof of concept in https://github.com/imjasonh/seccomp-profile which I can now archive and point to this much better replacement 🎉
One thin…