This repository was archived by the owner on May 12, 2021. It is now read-only.
This repository was archived by the owner on May 12, 2021. It is now read-only.
virtcontainers: Seccomp profile passed has no effect, silently fails. #688
Description
Description of problem
When we pass a seccomp profile to a Kata Container, it silently fails and has no effect on the Kata
container.
Expected result
# cat sleep.json
{
"defaultAction": "SCMP_ACT_ALLOW",
"syscalls": [
{
"name": "nanosleep",
"action": "SCMP_ACT_ERRNO"
}
]
}
# docker run -it --security-opt seccomp=sleep.json --runtime kata-runtime busybox sh
/ # sleep 6 ( This should have no effect if seccomp profile got applied successfully)
/ #
Actual result
# docker run -it --security-opt seccomp=sleep.json --runtime kata-runtime busybox sh
/ # sleep 6 ( Sleeps for 6 seconds)
/ #