testing seccomp profile with kernel-version based rules

Signed-off-by: Sebastiaan van Stijn <[email protected]>
docker · Apr 19, 2024 · 1c551d5 · 1c551d5
1 parent b926edc
commit 1c551d5
Show file tree

Hide file tree

Showing 2 changed files with 850 additions and 1 deletion.
diff --git a/deb/Makefile b/deb/Makefile
@@ -32,7 +32,7 @@ RUN_FLAGS=
 # when running in a Ubuntu 24.04 container on a Ubuntu 20.04.6 host (kernel 5.15.0-1053-aws);
 # see https://github.com/docker/docker-ce-packaging/pull/1006#issuecomment-2006878743
 RUN?=docker run --rm \
-	--security-opt seccomp=unconfined \
+	--security-opt seccomp=$(CURDIR)/default.json \
 	-e PLATFORM \
 	-e EPOCH='$(EPOCH)' \
 	-e DEB_VERSION=$(word 1, $(GEN_DEB_VER)) \