Skip to content

Commit 52578c0

Browse files
r-bkglours
authored andcommitted
Properly handle "builtin" seccomp profile
Like in CLI [1] the "builtin" seccomp profile should be handled the same as "unconfined". [1] https://github.com/docker/cli/blob/f4a68da19595d64c50b0bbc2b1f15e645943ed82/cli/command/container/opts.go#L929 Signed-off-by: Rafael Buchbinder <[email protected]>
1 parent bd2b49a commit 52578c0

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

pkg/compose/create.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -486,7 +486,7 @@ func parseSecurityOpts(p *types.Project, securityOpts []string) ([]string, bool,
486486
return securityOpts, false, fmt.Errorf("Invalid security-opt: %q", opt)
487487
}
488488
}
489-
if con[0] == "seccomp" && con[1] != "unconfined" {
489+
if con[0] == "seccomp" && con[1] != "unconfined" && con[1] != "builtin" {
490490
f, err := os.ReadFile(p.RelativePath(con[1]))
491491
if err != nil {
492492
return securityOpts, false, fmt.Errorf("opening seccomp profile (%s) failed: %w", con[1], err)

0 commit comments

Comments
 (0)