kotovalexarian-likes-github
/
moby--moby
mirror of https://github.com/moby/moby.git
1
0
Fork 0
Code Releases Activity
moby--moby/libnetwork/firewall_others.go

7 lines
87 B
Go
Raw Normal View History

Add a filter chain to allow persistent rules Allow users to configure firewall policies in a way that persists docker operations/restarts. Docker will not delete or modify any pre-existing rules from the DOCKER-USER filter chain. This allows the user to create in advance any rules required to further restrict access from/to the containers. Fixes docker/docker#29184 Fixes docker/docker#23987 Related to docker/docker#24848 Signed-off-by: Jacob Wen <jian.w.wen@oracle.com>
2017-03-13 07:46:46 +00:00
// +build !linux
package libnetwork
Reload DOCKER-USER chain on frewalld reload. Relates to moby/moby#35043 Signed-off-by: Brian Goff <cpuguy83@gmail.com>
2018-01-12 15:29:09 +00:00
func (c *controller) arrangeUserFilterRule() {
Add a filter chain to allow persistent rules Allow users to configure firewall policies in a way that persists docker operations/restarts. Docker will not delete or modify any pre-existing rules from the DOCKER-USER filter chain. This allows the user to create in advance any rules required to further restrict access from/to the containers. Fixes docker/docker#29184 Fixes docker/docker#23987 Related to docker/docker#24848 Signed-off-by: Jacob Wen <jian.w.wen@oracle.com>
2017-03-13 07:46:46 +00:00
}