Post

Seccomp container profile bypass: runc casts your seccomp's errnoRet to int16 before passing it to libseccomp. errnoRet=65536 > int16(0) > SCMP_ACT_ERRNO(0) > kernel returns 0 errors == syscall goes from blocked to allowed