kotovalexarian-likes-github/moby--moby
1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2022-11-09 12:21:53 -05:00
Code Releases Activity

Block vm86 syscalls in default seccomp profile

Browse source 
These provide an in kernel virtual machine for x86 real mode on x86
used by one very early DOS emulator. Not required for any normal use.

Signed-off-by: Justin Cormack <justin.cormack@unikernel.com>
This commit is contained in:
Justin Cormack 2015-12-29 15:47:23 +00:00
parent eb551baf6f
commit 6c3ea7a511
1 changed files with 12 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
daemon/execdriver/native/seccomp_default.go
View file

@ -316,5 +316,17 @@ var defaultSeccompProfile = &configs.Seccomp{
Action: configs.Errno,
Args: []*configs.Arg{},
},
{
// In kernel x86 real mode virtual machine
Name: "vm86",
Action: configs.Errno,
Args: []*configs.Arg{},
},
{
// In kernel x86 real mode virtual machine
Name: "vm86old",
Action: configs.Errno,
Args: []*configs.Arg{},
},
},
}