Sören Tempel 85eaf23bf4 seccomp: add support for "swapcontext" syscall in default policy ... This system call is only available on the 32- and 64-bit PowerPC, it is used by modern programming language implementations (such as gcc-go) to implement coroutine features through userspace context switches. Other container environment, such as Systemd nspawn already whitelist this system call in their seccomp profile [1] [2]. As such, it would be nice to also whitelist it in moby. This issue was encountered on Alpine Linux GitLab CI system, which uses moby, when attempting to execute gcc-go compiled software on ppc64le. [1]: https://github.com/systemd/systemd/pull/9487 [2]: https://github.com/systemd/systemd/issues/9485 Signed-off-by: Sören Tempel <soeren+git@soeren-tempel.net>		2021-12-18 14:06:07 +01:00
..
apparmor
seccomp	seccomp: add support for "swapcontext" syscall in default policy	2021-12-18 14:06:07 +01:00