@@ -157,14 +157,16 @@ Kubernetes 还可以为 Pod 和容器设置 `allowPrivilegeEscalation`。当此
157
157
158
158
<!--
159
159
To learn how to implement seccomp in Kubernetes, refer to
160
- [Restrict a Container's Syscalls with seccomp](/docs/tutorials/security/seccomp/).
160
+ [Restrict a Container's Syscalls with seccomp](/docs/tutorials/security/seccomp/)
161
+ or the [Seccomp node reference](/docs/reference/node/seccomp/)
161
162
162
163
To learn more about seccomp, see
163
164
[Seccomp BPF](https://www.kernel.org/doc/html/latest/userspace-api/seccomp_filter.html)
164
165
in the Linux kernel documentation.
165
166
-->
166
167
要了解如何在 Kubernetes 中实现 seccomp,
167
- 请参阅[ 使用 seccomp 限制容器的系统调用] ( /zh-cn/docs/tutorials/security/seccomp/ ) 。
168
+ 请参阅[ 使用 seccomp 限制容器的系统调用] ( /zh-cn/docs/tutorials/security/seccomp/ ) 或
169
+ [ Seccomp 节点参考] ( /zh-cn/docs/reference/node/seccomp/ ) 。
168
170
169
171
要了解 seccomp 的更多细节,请参阅 Linux 内核文档中的
170
172
[ Seccomp BPF] ( https://www.kernel.org/doc/html/latest/userspace-api/seccomp_filter.html ) 。
@@ -506,7 +508,9 @@ of support that you need. For instructions, refer to
506
508
* [Learn how to use AppArmor](/docs/tutorials/security/apparmor/)
507
509
* [Learn how to use seccomp](/docs/tutorials/security/seccomp/)
508
510
* [Learn how to use SELinux](/docs/tasks/configure-pod-container/security-context/#assign-selinux-labels-to-a-container)
511
+ * [Seccomp Node Reference](/docs/reference/node/seccomp/)
509
512
-->
510
513
* [ 学习如何使用 AppArmor] ( /zh-cn/docs/tutorials/security/apparmor/ )
511
514
* [ 学习如何使用 seccomp] ( /zh-cn/docs/tutorials/security/seccomp/ )
512
515
* [ 学习如何使用 SELinux] ( /zh-cn/docs/tasks/configure-pod-container/security-context/#assign-selinux-labels-to-a-container )
516
+ * [ Seccomp 节点参考] ( /zh-cn/docs/reference/node/seccomp/ )
0 commit comments