Add chroot to runc baseprofile

Signed-off-by: Sascha Grunert <[email protected]>
kubernetes-sigs · Dec 13, 2024 · fc76684 · fc76684
1 parent 2e27bdf
commit fc76684
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/examples/apparmorprofile-sleep.yaml b/examples/apparmorprofile-sleep.yaml
@@ -19,6 +19,7 @@ spec:
       - setgid
       - setpcap
       - sys_admin
+      - sys_chroot
     executable:
       allowedExecutables:
       - /bin/busybox

diff --git a/examples/baseprofile-runc.yaml b/examples/baseprofile-runc.yaml
@@ -15,6 +15,7 @@ spec:
         - capget
         - capset
         - chdir
+        - chroot
         - clone
         - clone3
         - close
-Original file line number
+Diff line change
@@ Expand Up / @@ -15,6 +15,7 @@ spec: @@
             - capget
             - capset
             - chdir
+            - chroot
             - clone
             - clone3
             - close
@@ Expand Down @@