docker
/
docs
mirror of https://github.com/docker/docs.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #22922 from justincormack/ppc64le-seccomp 

Enable seccomp on ppc64le
This commit is contained in:
Phil Estes 2016-05-24 16:08:50 -04:00
parent 0802401d22 a83cedddc6
commit bdc06cf8f8
3 changed files with 11 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Dockerfile.ppc64le
View File

@ -168,7 +168,7 @@ RUN useradd --create-home --gid docker unprivilegeduser
VOLUME /var/lib/docker VOLUME /var/lib/docker
WORKDIR /go/src/github.com/docker/docker WORKDIR /go/src/github.com/docker/docker
ENV DOCKER_BUILDTAGS apparmor pkcs11 selinux ENV DOCKER_BUILDTAGS apparmor pkcs11 seccomp selinux
# Let us use a .bashrc file # Let us use a .bashrc file
RUN ln -sfv $PWD/.bashrc ~/.bashrc RUN ln -sfv $PWD/.bashrc ~/.bashrc

5
profiles/seccomp/default.json
View File

@ -1292,6 +1292,11 @@
"action": "SCMP_ACT_ALLOW", "action": "SCMP_ACT_ALLOW",
"args": [] "args": []
}, },
{
"name": "socketcall",
"action": "SCMP_ACT_ALLOW",
"args": []
},
{ {
"name": "socketpair", "name": "socketpair",
"action": "SCMP_ACT_ALLOW", "action": "SCMP_ACT_ALLOW",

5
profiles/seccomp/seccomp_default.go
View File

@ -1321,6 +1321,11 @@ func DefaultProfile(rs *specs.Spec) *types.Seccomp {
Action: types.ActAllow, Action: types.ActAllow,
Args: []*types.Arg{}, Args: []*types.Arg{},
}, },
{
Name: "socketcall",
Action: types.ActAllow,
Args: []*types.Arg{},
},
{ {
Name: "socketpair", Name: "socketpair",
Action: types.ActAllow, Action: types.ActAllow,