1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2022-11-09 12:21:53 -05:00

Merge pull request #18956 from justincormack/umount

Block original umount syscall in default seccomp filter
This commit is contained in:
Arnaud Porterie 2015-12-29 10:19:04 -08:00
commit a32b06b067

View file

@ -316,6 +316,12 @@ var defaultSeccompProfile = &configs.Seccomp{
Action: configs.Errno,
Args: []*configs.Arg{},
},
{
// Deny umount
Name: "umount",
Action: configs.Errno,
Args: []*configs.Arg{},
},
{
// Deny umount
Name: "umount2",