A Linux workload should use its container runtime's default seccomp profile instead of running unconfined. Which Pod or container securityContext setting requests that behavior?

Published
  1. privileged: true
  2. seccompProfile.type: Unconfined
  3. seccompProfile.type: RuntimeDefault
  4. readOnlyRootFilesystem: true alone

Comments — 0