Seccomp profiles for real workloads, not for demos

DEV Community

Seccomp profiles for real workloads, not for demos

RuntimeDefault blocks escape primitives and permits a wide call surface. How to derive a stricter profile from observed workload behaviour without breaking production.

RuntimeDefault blocks escape primitives and permits a wide call surface. How to derive a stricter profile from observed workload behaviour without breaking production.