Valentin Rothberg f3f4c54f2a policy for seccomp-profile selection ...

Implement a policy for selecting a seccomp profile.  In addition to the
default behaviour (default profile unless --security-opt seccomp is set)
add a second policy doing a lookup in the image annotation.

If the image has the "io.containers.seccomp.profile" set its value will be
interpreted as a seccomp profile.  The policy can be selected via the
new --seccomp-policy CLI flag.

Once the containers.conf support is merged into libpod, we can add an
option there as well.

Note that this feature is marked as experimental and may change in the
future.

Signed-off-by: Valentin Rothberg <rothberg@redhat.com>

2020-01-09 17:57:58 +01:00

..

markdown

policy for seccomp-profile selection

2020-01-09 17:57:58 +01:00

Commands.rst

Update document formatting and packaging code

2019-10-31 12:31:39 -05:00

conf.py

Restructure documentation dir

2019-10-31 12:31:39 -05:00

generate.rst

Update document formatting and packaging code

2019-10-31 12:31:39 -05:00

healthcheck.rst

Update document formatting and packaging code

2019-10-31 12:31:39 -05:00

image.rst

Update document formatting and packaging code

2019-10-31 12:31:39 -05:00

index.rst

Restructure documentation dir

2019-10-31 12:31:39 -05:00

Introduction.rst

Restructure documentation dir

2019-10-31 12:31:39 -05:00

managecontainers.rst

Update document formatting and packaging code

2019-10-31 12:31:39 -05:00

network.rst

Update document formatting and packaging code

2019-10-31 12:31:39 -05:00

play.rst

Update document formatting and packaging code

2019-10-31 12:31:39 -05:00

pod.rst

Remove containers when pruning a stopped pod.

2019-11-26 13:19:31 -05:00

Reference.rst

Restructure documentation dir

2019-10-31 12:31:39 -05:00

system.rst

Update document formatting and packaging code

2019-10-31 12:31:39 -05:00

Tutorials.rst

Restructure documentation dir

2019-10-31 12:31:39 -05:00

volume.rst

Update document formatting and packaging code

2019-10-31 12:31:39 -05:00