1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2022-11-09 12:21:53 -05:00
moby--moby/daemon
Justin Cormack ac47ad8ea4 Add some uses of personality syscall to default seccomp filter
We generally want to filter the personality(2) syscall, as it
allows disabling ASLR, and turning on some poorly supported
emulations that have been the target of CVEs. However the use
cases for reading the current value, setting the default
PER_LINUX personality, and setting PER_LINUX32 for 32 bit
emulation are fine.

See issue #20634

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
(cherry picked from commit 39b799ac53)
2016-03-07 16:36:41 -05:00
..
daemonbuilder Modify import paths to point to the new engine-api package. 2016-01-06 19:48:59 -05:00
events Modify import paths to point to the new engine-api package. 2016-01-06 19:48:59 -05:00
exec Fix race condition in execCommandGC 2016-01-26 12:58:49 -08:00
execdriver Add some uses of personality syscall to default seccomp filter 2016-03-07 16:36:41 -05:00
graphdriver Fix ZFS permissions bug with user namespaces 2016-02-10 11:29:01 -05:00
links Replace usage of pkg/nat with go-connections/nat. 2015-12-22 13:31:46 -05:00
logger only close LogDriver after LogCopier is done 2016-01-26 12:58:46 -08:00
network Modify import paths to point to the new engine-api package. 2016-01-06 19:48:59 -05:00
archive.go Fix copy chown settings to not default to real root 2016-02-19 19:46:56 -05:00
archive_unix.go Move Container to its own package. 2015-12-03 17:39:49 +01:00
archive_windows.go Move Container to its own package. 2015-12-03 17:39:49 +01:00
attach.go Implement configurable detach key 2016-01-03 23:03:39 +01:00
changes.go Rename Daemon.Get to Daemon.GetContainer. 2015-12-11 12:39:28 -05:00
commit.go Modify import paths to point to the new engine-api package. 2016-01-06 19:48:59 -05:00
config.go Avoid setting default truthy values from flags that are not set. 2016-02-19 20:02:47 -05:00
config_experimental.go Move userns support out of experimental into master 2016-01-08 15:06:22 -05:00
config_stub.go
config_test.go Verify that the configuration keys in the file are valid. 2016-01-26 12:58:53 -08:00
config_unix.go Allow network configuration via daemon config file. 2016-01-26 12:59:00 -08:00
config_windows.go Allow network configuration via daemon config file. 2016-01-26 12:59:00 -08:00
container_operations.go Move Container to its own package. 2015-12-03 17:39:49 +01:00
container_operations_unix.go Prevent mqueue from implicitely becoming a bind mount with --ipc=host 2016-02-10 12:58:27 -05:00
container_operations_windows.go Allow network configuration via daemon config file. 2016-01-26 12:59:00 -08:00
create.go Reject multiple networks on container creation 2016-01-26 12:58:58 -08:00
create_unix.go Allow external volume drivers to host anonymous volumes and copy existing data from image. 2016-01-26 12:58:53 -08:00
create_windows.go Allow external volume drivers to host anonymous volumes and copy existing data from image. 2016-01-26 12:58:53 -08:00
daemon.go Don’t stop daemon on migration hard failure 2016-02-09 13:09:07 -08:00
daemon_experimental.go Move userns support out of experimental into master 2016-01-08 15:06:22 -05:00
daemon_linux.go Force IPC mount to unmount on daemon shutdown/init 2015-10-30 15:41:48 -04:00
daemon_linux_test.go
daemon_stub.go Move userns support out of experimental into master 2016-01-08 15:06:22 -05:00
daemon_test.go Remove cluster storage advertise from reload. 2016-01-27 10:29:55 -08:00
daemon_unix.go Verify cgroup-parent name for systemd cgroup 2016-01-26 12:59:00 -08:00
daemon_unix_test.go Modify import paths to point to the new engine-api package. 2016-01-06 19:48:59 -05:00
daemon_unsupported.go
daemon_windows.go Verify cgroup-parent name for systemd cgroup 2016-01-26 12:59:00 -08:00
debugtrap_unix.go
debugtrap_unsupported.go
debugtrap_windows.go Fix typos found across repository 2015-12-13 18:04:12 +02:00
delete.go Fix removing mountpoints on container rm fail 2016-01-26 12:58:59 -08:00
delete_test.go Extract container store from the daemon. 2016-01-26 12:58:54 -08:00
discovery.go Allow to set daemon and server configurations in a file. 2016-01-14 16:44:37 -05:00
discovery_test.go Allow to set daemon and server configurations in a file. 2016-01-14 16:44:37 -05:00
errors.go Add own reference package wrapper 2015-12-16 11:58:52 -08:00
events.go Modify import paths to point to the new engine-api package. 2016-01-06 19:48:59 -05:00
events_test.go Modify import paths to point to the new engine-api package. 2016-01-06 19:48:59 -05:00
exec.go Fix exec start api with detach and AttachStdin at same time. fixes #20638 2016-03-07 14:46:48 -05:00
exec_unix.go Modify import paths to point to the new engine-api package. 2016-01-06 19:48:59 -05:00
exec_windows.go Modify import paths to point to the new engine-api package. 2016-01-06 19:48:59 -05:00
export.go Rename Daemon.Get to Daemon.GetContainer. 2015-12-11 12:39:28 -05:00
image_delete.go Extract container store from the daemon. 2016-01-26 12:58:54 -08:00
images.go Fix image filter 2016-01-14 08:17:40 +00:00
import.go Fix docker import on compressed data 2016-02-19 15:05:49 -05:00
info.go Extract container store from the daemon. 2016-01-26 12:58:54 -08:00
inspect.go Build names and links at runtime 2016-01-07 14:10:42 -05:00
inspect_unix.go Modify import paths to point to the new engine-api package. 2016-01-06 19:48:59 -05:00
inspect_windows.go Modify import paths to point to the new engine-api package. 2016-01-06 19:48:59 -05:00
kill.go Fix typos found across repository 2015-12-13 18:04:12 +02:00
links.go Add migration from sqlite links back to hostConfig 2016-01-11 11:31:29 -05:00
links_test.go Extract container store from the daemon. 2016-01-26 12:58:54 -08:00
list.go Fix the since and before filter behavior 2016-02-10 13:05:41 -05:00
list_unix.go Move Container to its own package. 2015-12-03 17:39:49 +01:00
list_windows.go Move Container to its own package. 2015-12-03 17:39:49 +01:00
logdrivers_linux.go Add Splunk logging driver #16207 2015-10-23 13:37:53 -07:00
logdrivers_windows.go Enable Splunk logdriver for windows 2015-11-12 10:57:21 -08:00
logs.go Rename Daemon.Get to Daemon.GetContainer. 2015-12-11 12:39:28 -05:00
mounts.go On container rm, don't remove named mountpoints 2016-01-26 12:58:59 -08:00
network.go Add IPAM Config Options to match libnetwork 2016-01-14 14:32:25 -05:00
pause.go Rename Daemon.Get to Daemon.GetContainer. 2015-12-11 12:39:28 -05:00
README.md
rename.go Build names and links at runtime 2016-01-07 14:10:42 -05:00
resize.go Rename Daemon.Get to Daemon.GetContainer. 2015-12-11 12:39:28 -05:00
restart.go Rename Daemon.Get to Daemon.GetContainer. 2015-12-11 12:39:28 -05:00
selinux_linux.go Rename daemon/utils_*.go to selinux 2015-11-12 15:48:41 -08:00
selinux_unsupported.go Rename daemon/utils_*.go to selinux 2015-11-12 15:48:41 -08:00
start.go Revert "Break big lock into some tiny locks" 2016-01-14 13:38:09 -05:00
stats.go Modify import paths to point to the new engine-api package. 2016-01-06 19:48:59 -05:00
stats_collector_unix.go Move Container to its own package. 2015-12-03 17:39:49 +01:00
stats_collector_windows.go Move Container to its own package. 2015-12-03 17:39:49 +01:00
stats_freebsd.go Modify import paths to point to the new engine-api package. 2016-01-06 19:48:59 -05:00
stats_linux.go Modify import paths to point to the new engine-api package. 2016-01-06 19:48:59 -05:00
stats_windows.go Modify import paths to point to the new engine-api package. 2016-01-06 19:48:59 -05:00
stop.go Rename Daemon.Get to Daemon.GetContainer. 2015-12-11 12:39:28 -05:00
top_unix.go Modify import paths to point to the new engine-api package. 2016-01-06 19:48:59 -05:00
top_windows.go Modify import paths to point to the new engine-api package. 2016-01-06 19:48:59 -05:00
unpause.go Rename Daemon.Get to Daemon.GetContainer. 2015-12-11 12:39:28 -05:00
update.go Modify import paths to point to the new engine-api package. 2016-01-06 19:48:59 -05:00
volumes.go Do not relabel if user did not request it for non local volumes 2016-03-07 16:31:31 -05:00
volumes_unit_test.go reorder imports with goimports 2015-12-16 16:50:25 +01:00
volumes_unix.go Remove duplicated lazy volume initialization. 2016-01-13 11:22:31 -05:00
volumes_windows.go Remove duplicated lazy volume initialization. 2016-01-13 11:22:31 -05:00
wait.go Rename Daemon.Get to Daemon.GetContainer. 2015-12-11 12:39:28 -05:00

This directory contains code pertaining to running containers and storing images

Code pertaining to running containers:

  • execdriver

Code pertaining to storing images:

  • graphdriver