TGViewer
Kubesploit Kubesploit @kubesploit · 2.13K subscribers
Post #766 395
This project provides an OCI hook to generate seccomp profiles by tracing the syscalls made by the container.

The generated profile would allow all the syscalls made and deny every other syscall.

More: https://github.com/containers/oci-seccomp-bpf-hook
Open in Telegram All posts from @kubesploit
More from @kubesploit
  1. Oct 9, 2026This tutorial shows you how to secure Kubernetes with five Kyverno policies for resource l…
  2. Oct 9, 2026This case study shows how a hidden iptables-legacy NAT rule added by Tailscale changed sou…
  3. Oct 9, 2026LearnKube Day includes ten five-minute lightning talks from Kubernetes practitioners shari…
  4. Oct 8, 2026This article explains how to keep public EKS load balancer protected with AWS WAF, Shield…
  5. Oct 7, 2026This tutorial teaches how to secure Kubernetes AI platforms with RBAC, NetworkPolicy, secr…
  6. Oct 7, 2026This week on Learn Kubernetes Weekly 204: 🧠 Workload-Aware Scheduling in Kubernetes 1.37…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →