Share via


SeccompDefault type

Specifies the default seccomp profile applied to all workloads. If not specified, 'Unconfined' will be used by default.
KnownSeccompDefault can be used interchangeably with SeccompDefault, this enum contains the known values that the service supports.

Known values supported by the service

Unconfined: No seccomp profile is applied, allowing all system calls.
RuntimeDefault: The default seccomp profile for container runtime is applied, which restricts certain system calls for enhanced security.

type SeccompDefault = string