Justin Cormack 39b799ac53 Add some uses of personality syscall to default seccomp filter ... We generally want to filter the personality(2) syscall, as it allows disabling ASLR, and turning on some poorly supported emulations that have been the target of CVEs. However the use cases for reading the current value, setting the default PER_LINUX personality, and setting PER_LINUX32 for 32 bit emulation are fine. See issue #20634 Signed-off-by: Justin Cormack <justin.cormack@docker.com>		2016-02-26 18:43:08 +01:00
..
fixtures	move default seccomp profile into package	2016-01-21 16:55:29 -08:00
default.json	Add some uses of personality syscall to default seccomp filter	2016-02-26 18:43:08 +01:00
generate.go	generate seccomp profile convert type	2016-02-19 13:32:54 -08:00
seccomp.go	generate seccomp profile convert type	2016-02-19 13:32:54 -08:00
seccomp_default.go	Add some uses of personality syscall to default seccomp filter	2016-02-26 18:43:08 +01:00
seccomp_test.go	add seccomp default profile fix tests	2016-02-19 13:32:54 -08:00
seccomp_unsupported.go	generate seccomp profile convert type	2016-02-19 13:32:54 -08:00