diff options
| author | Daniel J Walsh <dwalsh@redhat.com> | 2018-01-17 11:03:07 -0500 |
|---|---|---|
| committer | Atomic Bot <atomic-devel@projectatomic.io> | 2018-01-18 12:26:43 +0000 |
| commit | 0d69ca6637b30a3370529b3e272f27f6fafdb0c3 (patch) | |
| tree | d6a69ad97b497eb5304c3a5b516a6056f4c85460 /libpod | |
| parent | 0befd8dafd116ea5f231f5b360b500be08c39297 (diff) | |
| download | podman-0d69ca6637b30a3370529b3e272f27f6fafdb0c3.tar.gz podman-0d69ca6637b30a3370529b3e272f27f6fafdb0c3.tar.bz2 podman-0d69ca6637b30a3370529b3e272f27f6fafdb0c3.zip | |
Fix seccomp support
If user does not specify seccomp file or seccomp file does not exist,
then use the default seccomp settings.
Still need to not hard code /etc/crio/seccomp.json, should move this to
/usr/share/seccomp/seccomp.json
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
Closes: #233
Approved by: baude
Diffstat (limited to 'libpod')
| -rw-r--r-- | libpod/runtime.go | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/libpod/runtime.go b/libpod/runtime.go index d0362ec79..804f69c9e 100644 --- a/libpod/runtime.go +++ b/libpod/runtime.go @@ -27,6 +27,10 @@ const ( InMemoryStateStore RuntimeStateStore = iota // SQLiteStateStore is a state backed by a SQLite database SQLiteStateStore RuntimeStateStore = iota + // SeccompDefaultPath defines the default seccomp path + SeccompDefaultPath = "/usr/share/containers/seccomp.json" + // SeccompOverridePath if this exists it overrides the default seccomp path + SeccompOverridePath = "/etc/crio/seccomp.json" ) // A RuntimeOption is a functional option which alters the Runtime created by |