From 153f0217e6b2fa84c06a4ecfd98cbe87560ff15c Mon Sep 17 00:00:00 2001 From: Fabricio Voznika Date: Thu, 4 May 2023 23:15:52 -0700 Subject: [PATCH] Make debug tip more clear in the code PiperOrigin-RevId: 529620411 --- pkg/seccomp/seccomp.go | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/pkg/seccomp/seccomp.go b/pkg/seccomp/seccomp.go index cb85d46c1..f0e9ad60b 100644 --- a/pkg/seccomp/seccomp.go +++ b/pkg/seccomp/seccomp.go @@ -54,7 +54,9 @@ func Install(rules SyscallRules, denyRules SyscallRules) error { return err } - // Uncomment to get stack trace when there is a violation. + // *** DEBUG TIP *** + // If you suspect the process is getting killed due to a seccomp violation, uncomment the line + // below to get a panic stack trace when there is a violation. // defaultAction = linux.BPFAction(linux.SECCOMP_RET_TRAP) log.Infof("Installing seccomp filters for %d syscalls (action=%v)", len(rules), defaultAction)