diff --git a/daemon/seccomp_disabled.go b/daemon/seccomp_disabled.go index 620eee29bf..8f13f5606d 100644 --- a/daemon/seccomp_disabled.go +++ b/daemon/seccomp_disabled.go @@ -3,10 +3,15 @@ package daemon import ( + "fmt" + "github.com/docker/docker/container" "github.com/opencontainers/specs/specs-go" ) func setSeccomp(daemon *Daemon, rs *specs.Spec, c *container.Container) error { + if c.SeccompProfile != "" && c.SeccompProfile != "unconfined" { + return fmt.Errorf("seccomp profiles are not supported on this daemon, you cannot specify a custom seccomp profile") + } return nil }