*Security Profiles Operator (SPO)* simplifies security policy management for namespaced workloads and integrates seamlessly with OpenShift Container Platform’s compliance tooling. SPO manages *seccomp* and *SELinux* profiles as custom resources to keep workloads secure and compliant. The SPO features include:
- *Creation and distribution* of seccomp and SELinux profiles
- *Binding policies* to pods for fine-grained security control
- *Recording workloads* to generate tailored profiles
- *Synchronizing profiles* across worker nodes
- *Advanced configuration*: log enrichment, webhook setup, metrics, and namespace restrictions
You can install right from Operator Hub and use it on your OpenShift Container Platform on IBM Power. See https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/security_and_compliance/security-profiles-operator#spo-overview for detailed install instructions