moby--moby/profiles/seccomp
Justin Cormack 5abd881883 Allow restart_syscall in default seccomp profile
Fixes #20818

This syscall was blocked as there was some concern that it could be
used to bypass filtering of other syscall arguments. However none of the
potential syscalls where this could be an issue (poll, nanosleep,
clock_nanosleep, futex) are blocked in the default profile anyway.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-03-11 16:44:11 +00:00
..
fixtures
default.json Allow restart_syscall in default seccomp profile 2016-03-11 16:44:11 +00:00
generate.go generate seccomp profile convert type 2016-02-19 13:32:54 -08:00
seccomp.go fix some typos. 2016-03-10 10:09:27 +08:00
seccomp_default.go Allow restart_syscall in default seccomp profile 2016-03-11 16:44:11 +00:00
seccomp_test.go add seccomp default profile fix tests 2016-02-19 13:32:54 -08:00
seccomp_unsupported.go generate seccomp profile convert type 2016-02-19 13:32:54 -08:00