Properly handle "builtin" seccomp profile

Like in CLI [1] the "builtin" seccomp profile should be handled the same as "unconfined". [1] https://github.com/docker/cli/blob/f4a68da19595d64c50b0bbc2b1f15e645943ed82/cli/command/container/opts.go#L929 Signed-off-by: Rafael Buchbinder <[email protected]>
docker · Jan 20, 2025 · 52578c0 · 52578c0
1 parent bd2b49a
commit 52578c0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/compose/create.go b/pkg/compose/create.go
@@ -486,7 +486,7 @@ func parseSecurityOpts(p *types.Project, securityOpts []string) ([]string, bool,
 				return securityOpts, false, fmt.Errorf("Invalid security-opt: %q", opt)
 			}
 		}
-		if con[0] == "seccomp" && con[1] != "unconfined" {
+		if con[0] == "seccomp" && con[1] != "unconfined" && con[1] != "builtin" {
 			f, err := os.ReadFile(p.RelativePath(con[1]))
 			if err != nil {
 				return securityOpts, false, fmt.Errorf("opening seccomp profile (%s) failed: %w", con[1], err)