A command line tool to automatically generate seccomp profiles.
372
A command line tool to automatically generate seccomp profiles.
Generate profiles based on log files from the host by mapping the log:
docker run -t --read-only -v /var/log/kern.log paulinhu/zaz \
/zaz seccomp pid 32603
Generates seccomp profiles based on the execution of a docker image
zaz seccomp docker IMAGE COMMAND [flags]
# Profiling an alpine image that executes a ping:
zaz seccomp docker alpine "ping -c5 8.8.8.8"
--dry-run runs profiling without executing the docker commands
-h, --help help for docker
--log-path string path location for the kernel syslog (default "/var/log/kern.log")
-v, --verbose outputs to stdout all info level messages
Generates seccomp profiles by assessing the kernels logs for a given process ID
zaz seccomp pid [flags] PID
# To get a profile based on process id 4325:
zaz seccomp pid 4325
# Setting the syslog path (default is "/var/log/kern.log"):
To get a profile based on process id 4325:
zaz seccomp pid 4325 --log-path /var/log/syslog
-h, --help help for pid
--log-path string path location for the kernel syslog (default "/var/log/kern.log")
-v, --verbose outputs to stdout all info level messages
Licensed under the MIT License. You may obtain a copy of the License here.
Content type
Image
Digest
Size
10.2 MB
Last updated
about 7 years ago
docker pull paulinhu/zaz