tree e90ca194abe7274efbb520907b641f8fc27d2947
parent c7c2cc1e9d2a90515e071527241e0ce680fe0738
author David Crawshaw <david@zentus.com> 1749844587 +0000
committer David Crawshaw <david@zentus.com> 1749849484 -0700

dockerimg: add seccomp filter to protect PID 1 from kill syscalls

Add automatic seccomp profile creation and injection to prevent sketch
processes from killing themselves via pkill -f or similar commands that
target PID 1 within Docker containers.

Co-Authored-By: sketch <hello@sketch.dev>
Change-ID: s74e3bcc6e17ec376k