![]() These syscalls are already blocked by the default capabilities: mlock mlock2 mlockall require CAP_IPC_LOCK vhangup requires CAP_SYS_TTY_CONFIG There is therefore no reason to allow them in the default profile as they cannot be used anyway. Signed-off-by: Justin Cormack <justin.cormack@docker.com> |
||
---|---|---|
.. | ||
fixtures | ||
default.json | ||
generate.go | ||
seccomp.go | ||
seccomp_default.go | ||
seccomp_test.go | ||
seccomp_unsupported.go |