mirror of
https://github.com/moby/moby.git
synced 2022-11-09 12:21:53 -05:00
Replace now broken link with a "permalink"
Fix #17927. Instead of pointing to a file in Docker's GitHub repo on `master` (which got renamed, breaking the link), point to a specific version (the current latest). As a bonus, we now highlight the most relevant lines, without becoming more fragile. Signed-off-by: Paolo G. Giarrusso <p.giarrusso@gmail.com>
This commit is contained in:
parent
8b9856dbd7
commit
6b02876362
1 changed files with 1 additions and 1 deletions
|
@ -197,7 +197,7 @@ to the host.
|
|||
This won't affect regular web apps; but malicious users will find that
|
||||
the arsenal at their disposal has shrunk considerably! By default Docker
|
||||
drops all capabilities except [those
|
||||
needed](https://github.com/docker/docker/blob/master/daemon/execdriver/native/template/default_template.go),
|
||||
needed](https://github.com/docker/docker/blob/87de5fdd5972343a11847922e0f41d9898b5cff7/daemon/execdriver/native/template/default_template_linux.go#L16-L29),
|
||||
a whitelist instead of a blacklist approach. You can see a full list of
|
||||
available capabilities in [Linux
|
||||
manpages](http://man7.org/linux/man-pages/man7/capabilities.7.html).
|
||||
|
|
Loading…
Add table
Reference in a new issue