freedomofpress / dangerzone

Take potentially dangerous PDFs, office documents, or images and convert them to safe PDFs
https://dangerzone.rocks/
GNU Affero General Public License v3.0
3.35k stars 152 forks source link

Use a custom seccomp policy for older Docker Desktop releases #847

Closed apyrgio closed 6 days ago

apyrgio commented 6 days ago

We are aware that some Docker Desktop releases before 25.0.0 ship with a seccomp policy which disables the ptrace(2) system call. In such cases, we opt to use our own seccomp policy which allows this system call. This seccomp policy is the default one in the latest releases of Podman, and we use it in Linux distributions where Podman version is < 4.0.

Fixes #846