Add preflight check for seccomp

Signed-off-by: Kenta Tada <Kenta.Tada@sony.com>
kubernetes · Apr 13, 2021 · c9ffc95 · c9ffc95
1 parent ca2e257
commit c9ffc95
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/validators/types_unix.go b/validators/types_unix.go
@@ -57,6 +57,8 @@ var DefaultSysSpec = SysSpec{
 			{Name: "BLK_DEV_DM", Description: "Required for devicemapper."},
 			{Name: "CFS_BANDWIDTH", Description: "Required for CPU quota."},
 			{Name: "CGROUP_HUGETLB", Description: "Required for hugetlb cgroup."},
+			{Name: "SECCOMP", Description: "Required for seccomp."},
+			{Name: "SECCOMP_FILTER", Description: "Required for seccomp mode 2."},
 		},
 		Forbidden: []KernelConfig{},
 	},