kotovalexarian-likes-github/moby--moby
1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2022-11-09 12:21:53 -05:00
Code Releases Activity
moby--moby/profiles/seccomp
History
Justin Cormack e7a99ae5e1 Remove mlock and vhangup from the default seccomp profile 
These syscalls are already blocked by the default capabilities:
mlock mlock2 mlockall require CAP_IPC_LOCK
vhangup requires CAP_SYS_TTY_CONFIG

There is therefore no reason to allow them in the default profile
as they cannot be used anyway.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-04-21 18:23:59 +01:00
..
fixtures move default seccomp profile into package 2016-01-21 16:55:29 -08:00
default.json Remove mlock and vhangup from the default seccomp profile 2016-04-21 18:23:59 +01:00
generate.go generate seccomp profile convert type 2016-02-19 13:32:54 -08:00
seccomp.go Reuse profiles/seccomp package 2016-03-19 14:15:39 -07:00
seccomp_default.go Remove mlock and vhangup from the default seccomp profile 2016-04-21 18:23:59 +01:00
seccomp_test.go add seccomp default profile fix tests 2016-02-19 13:32:54 -08:00
seccomp_unsupported.go generate seccomp profile convert type 2016-02-19 13:32:54 -08:00