A
Aug 4, 2026AppArmor and seccomp Profiles: Restricting Container System Calls
AppArmor and seccomp Profiles: Restricting Container System Calls A Senior...
Aug 4, 20263 min read0 reactions0 comments
Tag archive
AppArmor and seccomp Profiles: Restricting Container System Calls A Senior...
Discover four Kubernetes annotations that instantly harden cluster security: seccomp, AppArmor, PSA enforcement, and ingress TLS-only access.
The CNCF's Security Profiles Operator graduated to v1.0.0 on June 26, freezing eight CRD APIs and clearing a third-party audit. The kubelet-side follow-up, KEP 6061 for OCI artifact distribution, is the piece still in flight.
We keep saying it: a container is not a security boundary. A shared kernel means one container...
apply Seccomp to reduce the attack surface of containers
Trying seccomp via mruby with introduction of them