Skip to content

Commit 1bc24bb

Browse files
authored
Merge pull request #31201 from mtilson/patch-3
Remove extra command and fix reference to profile
2 parents 1b75c44 + 5e96481 commit 1bc24bb

File tree

1 file changed

+3
-4
lines changed

1 file changed

+3
-4
lines changed

content/en/docs/tutorials/clusters/seccomp.md

Lines changed: 3 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -342,17 +342,16 @@ syscalls. Here seccomp has been instructed to error on any syscall by setting
342342
ability to do anything meaningful. What you really want is to give workloads
343343
only the privileges they need.
344344

345-
Clean up that Pod and Service before moving to the next section:
345+
Clean up that Pod before moving to the next section:
346346

347347
```shell
348-
kubectl delete service violation-pod --wait
349348
kubectl delete pod violation-pod --wait --now
350349
```
351350

352351
## Create Pod with seccomp profile that only allows necessary syscalls
353352

354-
If you take a look at the `fine-pod.json`, you will notice some of the syscalls
355-
seen in the first example where the profile set `"defaultAction":
353+
If you take a look at the `fine-grained.json` profile, you will notice some of the syscalls
354+
seen in syslog of the first example where the profile set `"defaultAction":
356355
"SCMP_ACT_LOG"`. Now the profile is setting `"defaultAction": "SCMP_ACT_ERRNO"`,
357356
but explicitly allowing a set of syscalls in the `"action": "SCMP_ACT_ALLOW"`
358357
block. Ideally, the container will run successfully and you will see no messages

0 commit comments

Comments
 (0)