oci: don't generate seccomp rules

Signed-off-by: Aleksa Sarai <asarai@suse.de>
opencontainers · Apr 11, 2017 · 4615b0c · 4615b0c
1 parent 6c5ddb2
commit 4615b0c
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/oci/config/convert/runtime.go b/oci/config/convert/runtime.go
@@ -148,5 +148,8 @@ func MutateRuntimeSpec(g rgen.Generator, rootfs string, image ispec.Image, manif
 		g.AddAnnotation(key, value)
 	}
 
+	// Remove all seccomp rules.
+	g.Spec().Linux.Seccomp = nil
+
 	return nil
 }