TGViewer
Kubesploit Kubesploit @kubesploit · 2.13K subscribers
Post #369 592
This project provides an OCI hook to generate seccomp profiles by tracing the syscalls made by the container.

The generated profile would allow all the syscalls made and deny every other syscall.

More: https://github.com/containers/oci-seccomp-bpf-hook
Open in Telegram All posts from @kubesploit
More from @kubesploit
  1. Oct 16, 2026This article is a deep dive into how OpenChoreo does authorization: declarative RBAC with…
  2. Oct 15, 2026This tutorial shows how to lock down outbound traffic with plain NetworkPolicy objects: de…
  3. Oct 15, 2026This article lays out an AI-assisted AWS DevSecOps pipeline on EKS, where Amazon Q reviews…
  4. Oct 14, 2026This tutorial builds a Kubernetes admission control setup on a local kind cluster, using K…
  5. Oct 14, 2026This week on Learn Kubernetes Weekly 205: 🚨 How Kubernetes Health Checks Brought Down a P…
  6. Oct 13, 2026This tutorial deploys that same open-source Kubernetes security console with Helm and then…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →