mirror of
https://github.com/moby/moby.git
synced 2022-11-09 12:21:53 -05:00
Allow different syscalls from kernels 5.12 -> 5.16
Kernel 5.12: mount_setattr: needs CAP_SYS_ADMIN Kernel 5.14: quotactl_fd: needs CAP_SYS_ADMIN memfd_secret: always allowed Kernel 5.15: process_mrelease: always allowed Kernel 5.16: futex_waitv: always allowed Signed-off-by: Djordje Lukic <djordje.lukic@docker.com>
This commit is contained in:
parent
f1dd6bf84e
commit
7de9f4f82d
2 changed files with 10 additions and 0 deletions
|
@ -131,6 +131,7 @@
|
|||
"ftruncate64",
|
||||
"futex",
|
||||
"futex_time64",
|
||||
"futex_waitv",
|
||||
"futimesat",
|
||||
"getcpu",
|
||||
"getcwd",
|
||||
|
@ -207,6 +208,7 @@
|
|||
"madvise",
|
||||
"membarrier",
|
||||
"memfd_create",
|
||||
"memfd_secret",
|
||||
"mincore",
|
||||
"mkdir",
|
||||
"mkdirat",
|
||||
|
@ -254,6 +256,7 @@
|
|||
"preadv",
|
||||
"preadv2",
|
||||
"prlimit64",
|
||||
"process_mrelease",
|
||||
"pselect6",
|
||||
"pselect6_time64",
|
||||
"pwrite64",
|
||||
|
@ -581,11 +584,13 @@
|
|||
"fspick",
|
||||
"lookup_dcookie",
|
||||
"mount",
|
||||
"mount_setattr",
|
||||
"move_mount",
|
||||
"name_to_handle_at",
|
||||
"open_tree",
|
||||
"perf_event_open",
|
||||
"quotactl",
|
||||
"quotactl_fd",
|
||||
"setdomainname",
|
||||
"sethostname",
|
||||
"setns",
|
||||
|
|
|
@ -123,6 +123,7 @@ func DefaultProfile() *Seccomp {
|
|||
"ftruncate64",
|
||||
"futex",
|
||||
"futex_time64",
|
||||
"futex_waitv",
|
||||
"futimesat",
|
||||
"getcpu",
|
||||
"getcwd",
|
||||
|
@ -199,6 +200,7 @@ func DefaultProfile() *Seccomp {
|
|||
"madvise",
|
||||
"membarrier",
|
||||
"memfd_create",
|
||||
"memfd_secret",
|
||||
"mincore",
|
||||
"mkdir",
|
||||
"mkdirat",
|
||||
|
@ -246,6 +248,7 @@ func DefaultProfile() *Seccomp {
|
|||
"preadv",
|
||||
"preadv2",
|
||||
"prlimit64",
|
||||
"process_mrelease",
|
||||
"pselect6",
|
||||
"pselect6_time64",
|
||||
"pwrite64",
|
||||
|
@ -572,11 +575,13 @@ func DefaultProfile() *Seccomp {
|
|||
"fspick",
|
||||
"lookup_dcookie",
|
||||
"mount",
|
||||
"mount_setattr",
|
||||
"move_mount",
|
||||
"name_to_handle_at",
|
||||
"open_tree",
|
||||
"perf_event_open",
|
||||
"quotactl",
|
||||
"quotactl_fd",
|
||||
"setdomainname",
|
||||
"sethostname",
|
||||
"setns",
|
||||
|
|
Loading…
Reference in a new issue