adding code to support seccomp apparmor securityprofile

Signed-off-by: Mike Brown <brownwm@us.ibm.com>
2020-11-06 17:49:35 -06:00
parent f1295043eb
commit b4727eafbe
3 changed files with 193 additions and 9 deletions
--- a/pkg/cri/server/sandbox_run_linux.go
+++ b/pkg/cri/server/sandbox_run_linux.go
@@ -165,7 +165,8 @@ func (c *criService) sandboxContainerSpecOpts(config *runtime.PodSandboxConfig,
 		specOpts        []oci.SpecOpts
 	)
 	seccompSpecOpts, err := c.generateSeccompSpecOpts(
-		securityContext.GetSeccompProfilePath(),
+		securityContext.GetSeccomp(),
+		securityContext.GetSeccompProfilePath(), // nolint:staticcheck deprecated but we don't want to remove yet
 		securityContext.GetPrivileged(),
 		c.seccompEnabled())
 	if err != nil {