----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/68022/ -----------------------------------------------------------
(Updated Aug. 6, 2018, 1:39 p.m.) Review request for mesos, Gilbert Song, Jie Yu, James Peach, and Qian Zhang. Bugs: MESOS-9106 https://issues.apache.org/jira/browse/MESOS-9106 Repository: mesos Description ------- Containerizer launcher creates an instance of `SeccompFilter`, which is used to setup Seccomp profile using `ContainerSeccompProfile` message prepared by the `linux/seccomp` isolator. The Seccomp filter is loaded right before calling `execve()`, so that a container will be running with a syscall filtering enabled. Diffs ----- src/slave/containerizer/mesos/launch.cpp 7193da0a094df3e441e185c62b3a0379a0bdc4a2 Diff: https://reviews.apache.org/r/68022/diff/1/ Testing ------- Thanks, Andrei Budnik