Sebastiaan van Stijn 8912c1fade seccomp: allow "bpf", "perf_event_open", gated by CAP_BPF, CAP_PERFMON ... Update the profile to make use of CAP_BPF and CAP_PERFMON capabilities. Prior to kernel 5.8, bpf and perf_event_open required CAP_SYS_ADMIN. This change enables finer control of the privilege setting, thus allowing us to run certain system tracing tools with minimal privileges. Based on the original patch from Henry Wang in the containerd repository. Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit 7b7d1132e8) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>		2022-08-18 18:36:49 +02:00
..
apparmor	Fix AppArmor profile docker-default /proc/sys rule	2022-06-30 21:12:58 +02:00
seccomp	seccomp: allow "bpf", "perf_event_open", gated by CAP_BPF, CAP_PERFMON	2022-08-18 18:36:49 +02:00