mirror of
https://github.com/moby/moby.git
synced 2022-11-09 12:21:53 -05:00
Merge pull request #18956 from justincormack/umount
Block original umount syscall in default seccomp filter
This commit is contained in:
commit
a32b06b067
1 changed files with 6 additions and 0 deletions
|
@ -316,6 +316,12 @@ var defaultSeccompProfile = &configs.Seccomp{
|
||||||
Action: configs.Errno,
|
Action: configs.Errno,
|
||||||
Args: []*configs.Arg{},
|
Args: []*configs.Arg{},
|
||||||
},
|
},
|
||||||
|
{
|
||||||
|
// Deny umount
|
||||||
|
Name: "umount",
|
||||||
|
Action: configs.Errno,
|
||||||
|
Args: []*configs.Arg{},
|
||||||
|
},
|
||||||
{
|
{
|
||||||
// Deny umount
|
// Deny umount
|
||||||
Name: "umount2",
|
Name: "umount2",
|
||||||
|
|
Loading…
Add table
Reference in a new issue