Original Summary

At the place where I work, we use the runtime’s default seccomp profile. My colleague and I wanted to see which syscalls our pods actually make, so we decided to capture and audit them and then generate a workload-specific list of syscalls.<p>We ended up building a feature in our security tool that does exactly that.<p>Blog post: <a href="https:&#x2F;&#x2F;dev.to&#x2F;maheshrayas&#x2F;part-2-the-seccomp-profile-nobody-writes-by-hand-p5f" rel="nofollow">https:&#x2F;&#x2F;dev.to&#x2F;maheshrayas&#x2F;part-2-the-seccomp-profile-nobody...</a>

  • 情报分类：综合情报
  • 分类依据：内容未命中明确的垂直分类规则，归入综合情报
  • 信息来源：Hacker News 新项目
  • 发布时间：2026/9/30 15:36:02