moby--moby/contrib
Akihiro Suda 5bd4233d7b
rootless: harden slirp4netns with mount namespace and seccomp
When slirp4netns v0.4.0+ is used, now slirp4netns is hardened using
mount namespace ("sandbox") and seccomp to mitigate potential
vulnerabilities.

bump up rootlesskit: 2fcff6ceae...791ac8cb20

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
(cherry picked from commit e20b7323fb)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2019-10-05 10:54:26 +02:00
..
apparmor
desktop-integration
docker-device-tool Remove solaris build tag and `contrib/mkimage/solaris 2017-11-02 00:01:46 +00:00
gitdm
httpserver
init openrc: Modernize and sync settings 2019-04-02 15:06:49 +02:00
mkimage mkimage: Fix Debian security presence check 2018-12-05 19:35:17 +01:00
nnp-test
syntax Update Github url for vim syntax plugin 2018-08-04 13:42:43 +07:00
syscall-test
udev
vagrant-docker
README.md
REVIEWERS
check-config.sh Add CONFIG_IP_VS_PROTO_TCP, CONFIG_IP_VS_PROTO_UDP, IP_NF_TARGET_REDIRECT to check-config.sh 2018-11-15 11:11:48 +01:00
docker-machine-install-bundle.sh Remove 'docker-' prefix for containerd and runc binaries 2018-09-24 21:49:03 +00:00
dockerd-rootless.sh rootless: harden slirp4netns with mount namespace and seccomp 2019-10-05 10:54:26 +02:00
dockerize-disk.sh
download-frozen-image-v1.sh
download-frozen-image-v2.sh Fix error handling when go command is missing 2018-11-04 23:34:03 -05:00
editorconfig
mac-install-bundle.sh
mkimage-alpine.sh Removed the "-i -t" arguments from the smoke test calling printf (these flags seem not really needed, and break jenkins builds with error "the input device is not a TTY") 2018-07-05 17:29:17 +02:00
mkimage-arch-pacman.conf
mkimage-arch.sh
mkimage-archarm-pacman.conf
mkimage-crux.sh
mkimage-pld.sh
mkimage-yum.sh Default to Core group only if no groups specified 2019-03-29 20:21:33 +05:30
mkimage.sh Remove solaris build tag and `contrib/mkimage/solaris 2017-11-02 00:01:46 +00:00
nuke-graph-directory.sh
report-issue.sh

README.md

The contrib directory contains scripts, images, and other helpful things which are not part of the core docker distribution. Please note that they could be out of date, since they do not receive the same attention as the rest of the repository.