InTheForest/moby
1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2026-01-11 18:51:37 +00:00
Code Issues Packages Projects Releases Wiki Activity

seccomp: allow specifying a custom profile with --privileged

Browse Source 
`--privileged --security-opt seccomp=<CUSTOM.json>` was ignoring
`<CUSTOM.json>`.

Fix issue 47499

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
This commit is contained in:
Akihiro Suda
2024-03-05 23:37:29 +09:00
parent 22c212d208
commit 896de6d426
3 changed files with 63 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
daemon/seccomp_linux.go
View File

@@ -22,7 +22,11 @@ func WithSeccomp(daemon *Daemon, c *container.Container) coci.SpecOpts {
return nil
}
if c.HostConfig.Privileged {
return nil
var err error
if c.SeccompProfile != "" {
s.Linux.Seccomp, err = seccomp.LoadProfile(c.SeccompProfile, s)
}
return err
}
if !daemon.RawSysInfo().Seccomp {
if c.SeccompProfile != "" && c.SeccompProfile != dconfig.SeccompProfileDefault {