From 51cf315c4eb641776a296825fae791438efd4608 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?A=C3=B0alsteinn=20R=C3=BAnarsson?= Date: Thu, 27 Aug 2020 15:07:46 +0000 Subject: [PATCH] Change wording for setting capabilities lists Update the wording for allow/deny approach for setting capabilities. --- engine/security/security.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/engine/security/security.md b/engine/security/security.md index 888526dd31..b9bb76e87b 100644 --- a/engine/security/security.md +++ b/engine/security/security.md @@ -192,7 +192,7 @@ This doesn't affect regular web apps, but reduces the vectors of attack by malicious users considerably. By default Docker drops all capabilities except [those needed](https://github.com/moby/moby/blob/master/oci/defaults.go#L14-L30), -a whitelist instead of a blacklist approach. You can see a full list of +an allowlist instead of a denylist approach. You can see a full list of available capabilities in [Linux manpages](http://man7.org/linux/man-pages/man7/capabilities.7.html).