Skip to content

Commit 3e48467

Browse files
authored
Remove extra command and fix reference to profile
1 parent cc53157 commit 3e48467

File tree

1 file changed

+2
-3
lines changed

1 file changed

+2
-3
lines changed

content/en/docs/tutorials/clusters/seccomp.md

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -345,14 +345,13 @@ only the privileges they need.
345345
Clean up that Pod and Service before moving to the next section:
346346

347347
```shell
348-
kubectl delete service violation-pod --wait
349348
kubectl delete pod violation-pod --wait --now
350349
```
351350

352351
## Create Pod with seccomp profile that only allows necessary syscalls
353352

354-
If you take a look at the `fine-pod.json`, you will notice some of the syscalls
355-
seen in the first example where the profile set `"defaultAction":
353+
If you take a look at the `fine-grained.json` profile, you will notice some of the syscalls
354+
seen in syslog of the first example where the profile set `"defaultAction":
356355
"SCMP_ACT_LOG"`. Now the profile is setting `"defaultAction": "SCMP_ACT_ERRNO"`,
357356
but explicitly allowing a set of syscalls in the `"action": "SCMP_ACT_ALLOW"`
358357
block. Ideally, the container will run successfully and you will see no messages

0 commit comments

Comments
 (0)