[MESOS-9614] Implement filtering of Seccomp rules by kernel version.

• Type: Task
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: containerization
• Labels: containerizer isolator newbie
• Epic Link: Seccomp Improvement
• Assignee: Unassigned
• Reporter: Andrei Budnik
• Created: 27/Feb/19 14:28
• Updated: 27/Feb/19 14:32

Description

The most recent Docker profile allows to specify filtering by kernel version, e.g:

{
	"names": [
		"ptrace"
	],
	"action": "SCMP_ACT_ALLOW",
	"args": null,
	"comment": "",
	"includes": {
		"minKernel": "4.8"
	},
	"excludes": {}
},

We need to add support for `minKernel` filter.

Issue Links

• links to: Docker PR