As mentioned in our ROADMAP.md, we'd like to progress toward seccomp support in Docker 1.10.
As a phase 1, I propose allowing the Engine to accept a seccomp profile at container run time. In the future, we might want to ship builtin profiles, or bake profiles in the images: design work about that future would be a plus.
Ping @jfrazelle who's interested to look into that!
As mentioned in our ROADMAP.md, we'd like to progress toward seccomp support in Docker 1.10.
As a phase 1, I propose allowing the Engine to accept a seccomp profile at container run time. In the future, we might want to ship builtin profiles, or bake profiles in the images: design work about that future would be a plus.
Ping @jfrazelle who's interested to look into that!