kguardian

关于

At the place where I work, we use the runtime’s default seccomp profile. My colleague and I wanted to see which syscalls our pods actually make, so we decided to capture and audit them and then generate a workload-specific list of syscalls. We ended up building a feature in our security tool that does exactly that. Blog post: https://dev.to/maheshrayas/part-2-the-seccomp-profile-nobody...

收录记录

1. Show HN

   2026年9月30日 · 1 次收录