kotovalexarian-likes-github/moby--moby
1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2022-11-09 12:21:53 -05:00
Code Releases Activity
moby--moby/profiles/seccomp
History
clubby789 d39b075302 Enable process_vm_readv and process_vm_writev for kernel > 4.8 
These syscalls were disabled in #18971
due to them requiring CAP_PTRACE. CAP_PTRACE was blocked by default due
to a ptrace related exploit. This has been patched in the Linux kernel
(version 4.8) and thus `ptrace` has been re-enabled. However, these
associated syscalls seem to have been left behind. This commit brings
them in line with `ptrace`, and re-enables it for kernel > 4.8.

Signed-off-by: clubby789 <jamie@hill-daniel.co.uk>
2021-03-04 17:12:01 +00:00
..
fixtures seccomp: remove dependency on oci package 2020-09-29 19:39:15 +02:00
default.json Enable process_vm_readv and process_vm_writev for kernel > 4.8 2021-03-04 17:12:01 +00:00
default_linux.go Enable process_vm_readv and process_vm_writev for kernel > 4.8 2021-03-04 17:12:01 +00:00
generate.go New seccomp format 2016-09-01 11:53:07 +02:00
kernel_linux.go seccomp: implement marshal/unmarshall for MinVersion 2020-10-07 17:48:25 +02:00
kernel_linux_test.go seccomp: implement marshal/unmarshall for MinVersion 2020-10-07 17:48:25 +02:00
seccomp.go seccomp: implement marshal/unmarshall for MinVersion 2020-10-07 17:48:25 +02:00
seccomp_linux.go seccomp: implement marshal/unmarshall for MinVersion 2020-10-07 17:48:25 +02:00
seccomp_test.go seccomp: implement marshal/unmarshall for MinVersion 2020-10-07 17:48:25 +02:00
seccomp_unsupported.go seccomp: move seccomp types from api into seccomp profile 2020-09-18 18:14:16 +02:00