----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/68022/#review211988 -----------------------------------------------------------
Ship it! Ship It! - Qian Zhang On Aug. 6, 2018, 9:39 p.m., Andrei Budnik wrote: > > ----------------------------------------------------------- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/68022/ > ----------------------------------------------------------- > > (Updated Aug. 6, 2018, 9:39 p.m.) > > > Review request for mesos, Gilbert Song, Jie Yu, James Peach, and Qian Zhang. > > > Bugs: MESOS-9106 > https://issues.apache.org/jira/browse/MESOS-9106 > > > Repository: mesos > > > Description > ------- > > Containerizer launcher creates an instance of `SeccompFilter`, which is > used to setup Seccomp profile using `ContainerSeccompProfile` message > prepared by the `linux/seccomp` isolator. The Seccomp filter is loaded > right before calling `execve()`, so that a container will be running > with a syscall filtering enabled. > > > Diffs > ----- > > src/slave/containerizer/mesos/launch.cpp > 2f1c9e7a8748c9d7eab25bc8567ca68308e680f9 > > > Diff: https://reviews.apache.org/r/68022/diff/8/ > > > Testing > ------- > > > Thanks, > > Andrei Budnik > >
