moby--moby/profiles
Florian Schmaus d0d99b04cf seccomp: allow 'rseq' syscall in default seccomp profile
Restartable Sequences (rseq) are a kernel-based mechanism for fast
update operations on per-core data in user-space. Some libraries, like
the newest version of Google's TCMalloc, depend on it [1].

This also makes dockers default seccomp profile on par with systemd's,
which enabled 'rseq' in early 2019 [2].

1: https://google.github.io/tcmalloc/design.html
2: 6fee3be0b4

Signed-off-by: Florian Schmaus <flo@geekplace.eu>
2020-06-26 16:06:26 +02:00
..
apparmor apparmor: allow readby and tracedby 2019-04-22 09:11:50 -05:00
seccomp seccomp: allow 'rseq' syscall in default seccomp profile 2020-06-26 16:06:26 +02:00