Package: golang-github-containers-common Version: 0.33.4+ds1-1 Severity: normal
Hello, When running a container in podman, using strace, you can see that it's trying to load /usr/share/containers/seccomp.json but the file is missing. Could you please ship the that file? Adding a default seccomp profile might break some workload (I guess?) but might make others more secure. Kind regards, Laurent Bigonville -- System Information: Debian Release: 11.0 APT prefers unstable-debug APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1, 'experimental-debug'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 5.10.0-6-amd64 (SMP w/4 CPU threads) Kernel taint flags: TAINT_FIRMWARE_WORKAROUND Locale: LANG=fr_BE.UTF-8, LC_CTYPE=fr_BE.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: SELinux: enabled - Mode: Permissive - Policy name: refpolicy Versions of packages golang-github-containers-common depends on: ii golang-github-containers-image 5.10.3-1 golang-github-containers-common recommends no packages. golang-github-containers-common suggests no packages. -- no debconf information
