diff --git a/pkg/seccomp/seccomp.go b/pkg/seccomp/seccomp.go index cb85d46c1..f0e9ad60b 100644 --- a/pkg/seccomp/seccomp.go +++ b/pkg/seccomp/seccomp.go @@ -54,7 +54,9 @@ func Install(rules SyscallRules, denyRules SyscallRules) error { return err } - // Uncomment to get stack trace when there is a violation. + // *** DEBUG TIP *** + // If you suspect the process is getting killed due to a seccomp violation, uncomment the line + // below to get a panic stack trace when there is a violation. // defaultAction = linux.BPFAction(linux.SECCOMP_RET_TRAP) log.Infof("Installing seccomp filters for %d syscalls (action=%v)", len(rules), defaultAction)