To make this generic so that it will work on older and newer hosts we should probably change the peer expression to
signal (receive) peer={runc,unconfined},
or possibly, define an @{runc} variable in the preamble and use that. This really only is advantageous, in that it shows semantic intent, if if using the value of unconfined, or if @[runc} is used multiple times within the profile.
To make this generic so that it will work on older and newer hosts we should probably change the peer expression to
signal (receive) peer={runc, unconfined} ,
or possibly, define an @{runc} variable in the preamble and use that. This really only is advantageous, in that it shows semantic intent, if if using the value of unconfined, or if @[runc} is used multiple times within the profile.
@{runc} ={peer, unconfined}
signal (receive) peer=@{runc},