From 6b02876362680a1acd2c0fb1fdd85183cee03f20 Mon Sep 17 00:00:00 2001 From: "Paolo G. Giarrusso" Date: Thu, 12 Nov 2015 19:15:49 +0100 Subject: [PATCH] Replace now broken link with a "permalink" Fix #17927. Instead of pointing to a file in Docker's GitHub repo on `master` (which got renamed, breaking the link), point to a specific version (the current latest). As a bonus, we now highlight the most relevant lines, without becoming more fragile. Signed-off-by: Paolo G. Giarrusso --- docs/articles/security.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/articles/security.md b/docs/articles/security.md index 2eddbd2552..92f02dc0ad 100644 --- a/docs/articles/security.md +++ b/docs/articles/security.md @@ -197,7 +197,7 @@ to the host. This won't affect regular web apps; but malicious users will find that the arsenal at their disposal has shrunk considerably! By default Docker drops all capabilities except [those -needed](https://github.com/docker/docker/blob/master/daemon/execdriver/native/template/default_template.go), +needed](https://github.com/docker/docker/blob/87de5fdd5972343a11847922e0f41d9898b5cff7/daemon/execdriver/native/template/default_template_linux.go#L16-L29), a whitelist instead of a blacklist approach. You can see a full list of available capabilities in [Linux manpages](http://man7.org/linux/man-pages/man7/capabilities.7.html).