kotovalexarian-likes-github/moby--moby
1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2022-11-09 12:21:53 -05:00
Code Releases Activity

Merge pull request #33403 from szegedim/33126-whitelist-adjtimex

Browse source 
Whitelisting adjtimex get time operation and requiring CAP_SYS_TIME only in case of adjustment
This commit is contained in:
Tõnis Tiigi 2017-06-16 21:30:35 -07:00 committed by GitHub
commit 4f259698b0
2 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
profiles/seccomp/default.json
View file

@ -55,6 +55,7 @@
"accept",
"accept4",
"access",
"adjtimex",
"alarm",
"alarm",
"bind",
@ -719,7 +720,6 @@
"names": [
"settimeofday",
"stime",
"adjtimex",
"clock_settime"
],
"action": "SCMP_ACT_ALLOW",

2
profiles/seccomp/seccomp_default.go
View file

@ -49,6 +49,7 @@ func DefaultProfile() *types.Seccomp {
"accept",
"accept4",
"access",
"adjtimex",
"alarm",
"alarm",
"bind",
@ -611,7 +612,6 @@ func DefaultProfile() *types.Seccomp {
Names: []string{
"settimeofday",
"stime",
"adjtimex",
"clock_settime",
},
Action: types.ActAllow,