Skip to content

Commit

Permalink
Merge pull request #60 from vrothberg/update-readme
Browse files Browse the repository at this point in the history
README: link to the enable sysadmin article
  • Loading branch information
vrothberg authored Aug 12, 2020
2 parents 9ea9e07 + 2383634 commit c5e3818
Showing 1 changed file with 2 additions and 0 deletions.
2 changes: 2 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -21,3 +21,5 @@ sudo podman run --annotation io.containers.trace-syscall="if:[absolute path to t
```

The profile will be created at the output path provided to the annotation. Providing `of:` is mandatory, while `if:` is optional. An input file can be used to create a baseline and newly recorded syscalls will be added to the set and written to the output. If a syscall is blocked in the base profile, then it will remain blocked in the output file even if it is recorded while tracing.

Please refer to an article on [Enable Sysadmin](https://www.redhat.com/sysadmin/container-security-seccomp) for more details.

0 comments on commit c5e3818

Please sign in to comment.