mirror of
https://github.com/moby/moby.git
synced 2022-11-09 12:21:53 -05:00
Merge pull request #23130 from justincormack/seccomperror
Error out if user tries to specify a custom seccomp profile on system that does not support it
This commit is contained in:
commit
4a7715c978
1 changed files with 5 additions and 0 deletions
|
@ -3,10 +3,15 @@
|
||||||
package daemon
|
package daemon
|
||||||
|
|
||||||
import (
|
import (
|
||||||
|
"fmt"
|
||||||
|
|
||||||
"github.com/docker/docker/container"
|
"github.com/docker/docker/container"
|
||||||
"github.com/opencontainers/specs/specs-go"
|
"github.com/opencontainers/specs/specs-go"
|
||||||
)
|
)
|
||||||
|
|
||||||
func setSeccomp(daemon *Daemon, rs *specs.Spec, c *container.Container) error {
|
func setSeccomp(daemon *Daemon, rs *specs.Spec, c *container.Container) error {
|
||||||
|
if c.SeccompProfile != "" && c.SeccompProfile != "unconfined" {
|
||||||
|
return fmt.Errorf("seccomp profiles are not supported on this daemon, you cannot specify a custom seccomp profile")
|
||||||
|
}
|
||||||
return nil
|
return nil
|
||||||
}
|
}
|
||||||
|
|
Loading…
Add table
Reference in a new issue