About the seccomp of container

778 Views Asked by At

I want to get the available system call list of a running container without knowing the Seccomp profile. How can I achieve it?

1

There are 1 best solutions below

4
user268396 On

docker inspect should dump the SecurityOpt(s) which were used to run the container. Since the seccomp profile is applied through the security-opt commandline parameter, the active profile should be listed among whatever arguments were provided when starting the container.

Based on the profile name, you can translate that into the actual syscall whitelist/blacklist that is applied.