Commit Graph

31 Commits

Author SHA1 Message Date
Jan Kanis b4ab954d3f
fix description for ptrace in seccomp.md
The existing description leads the reader to believe that dropping CAP_SYS_PTRACE already blocks all ptraces. That is not true, it only blocks ptracing arbitrary processes. Ptracing child processes is still allowed.
2020-05-22 13:36:45 +02:00
Sourabh Shirhatti 6f893ed1c6
s/CAP_PTRACE/CAP_SYS_PTRACE 2020-05-04 14:03:02 -05:00
Sebastiaan van Stijn 777c5d23da
engine: use relative markdown links
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-04-23 13:03:32 +02:00
Sebastiaan van Stijn 91c5d19a14
Merge pull request #9662 from pjbgf/patch-2
Remove ptrace from blocked syscalls
2019-12-03 16:28:20 +01:00
Paulo Gomes 9c2520fa27
Fix table 2019-11-28 12:33:15 +00:00
Paulo Gomes 1962410b61
Corrections based on feedback 2019-11-28 12:30:44 +00:00
Paulo Gomes 432b7c4134
Improve clarity. 2019-11-28 09:06:03 +00:00
Paulo Gomes 2adcf3bd66
Add minKernel details for ptrace
Changes brought up by commit:

1124543ca8 (diff-0ebf5796a57d68894d5550c407061035)
2019-10-29 14:51:22 +00:00
Paulo Gomes 5c0c1eed40
Remove ptrace from blocked syscalls
Update documentation to reflect that ptrace is no longer blocked on the default profile.

More information:
1124543ca8 (diff-0ebf5796a57d68894d5550c407061035)
2019-10-17 09:59:47 +01:00
Paulo Gomes d32f93ca93
Remove reference to socket and socketcall 2019-10-17 09:53:28 +01:00
Paulo Gomes 04b5f87b28
Remove socket from blocked syscalls
Socket syscalls are no longer blocked on the default profile for a while now. More information: 
dcf2632945 (diff-0ebf5796a57d68894d5550c407061035)
2019-10-17 09:44:40 +01:00
Wang Jie 8a8ea7d666
Update seccomp.md 2019-03-25 09:35:26 +08:00
nvcastet ac941e6b03
Update seccomp.md
Fix #6854
2018-06-11 09:16:15 -05:00
Bryan Thornbury f32bbe902d Remove adjtimex. (#6032) 2018-05-10 09:40:37 -07:00
Gionni 5bb6473a72 less is more - avoid cat to grep something. (#6383) 2018-04-06 11:07:06 -07:00
gbarr01 22852c0b21 Update seccomp note and remove ref to Fedora 22 2018-01-02 17:13:00 -08:00
Wang Jie 8535b0f07d Update seccomp.md (#4518) 2017-09-11 17:00:00 -07:00
Bill a3a7ae1e0b replaced docker/docker with moby/moby (#2879)
* replaced docker/docker with moby/moby

* fixed incorrect name changes in release notes

* fixed mentions of moby/moby in code
2017-04-20 15:32:18 -05:00
Misty Stanley-Jones 730ec4717d Document new rules for seccomp profile 2017-04-05 17:45:44 -07:00
Misty Stanley-Jones 7b24cef2c1 Merge pull request #1880 from scjane/patch-40
Update seccomp.md
2017-02-22 10:08:41 -08:00
scjane 80483cd487 Update seccomp.md (#1879) 2017-02-21 18:50:42 -08:00
scjane 1dc6441a6a Update seccomp.md 2017-02-21 16:15:53 +08:00
Sebastiaan van Stijn d2826a8995 Add engine changes that were lost in syncing
When syncing docs from the docker/docker repository (e4bce35ac2)
some commits were not included. This includes those changes, by copying the documentation from

8658748ef7,
which is the last commit before the docs were removed from the docker/docker
repository in 29f08cf49b

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2017-01-19 10:16:52 -08:00
Sebastiaan van Stijn 8f8b4a25fe Remove Ubuntu 15.10 Wily Werewolf
As of July 28, 2016, Ubuntu 15.10 is officially EOL
(https://lists.ubuntu.com/archives/ubuntu-announce/2016-July/000210.html),
and will receive no further updates.

Support for 15.10 was removed in Docker 1.13 through
https://github.com/docker/docker/pull/27042

(e9a8105708)

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2017-01-19 10:16:51 -08:00
Misty Stanley-Jones e3a3145cd9 Sync vnext-engine branch to docker/docker SHA 2f12d2808464dcfdf45e0920fd508ce0ff12bd29
This branch will contain forward-looking Engine-specific docs
and be the equivalent of docker/docker master for docs
2017-01-19 10:10:15 -08:00
Gaetan a5e01e1844 fix type of keywords entry in frontmatter (in /engine/) (#552)
keywords should be a string, not an array containing one string

Signed-off-by: Gaetan de Villele <gdevillele@gmail.com>
2016-11-11 14:45:24 -08:00
John Mulhausen 558314bf56 Converges titles to imperative-form, front-matter based, and sentence-case (#438)
Multiple title fixes, consistency fixes, convergence into metadata-based titles.
2016-11-04 15:38:40 -07:00
Misty Stanley-Jones 1a193d749b Revert "Merge pull request #437 from gdevillele/fix_keywords_format"
This reverts commit 13ddc1350e, reversing
changes made to 7a11f05943.
2016-11-04 13:33:29 -07:00
Gaetan 8bb4d6226a fix more frontmatter keywords values (#439)
* fix format of frontmatter keyword entry in some .md files

Signed-off-by: Gaetan de Villele <gdevillele@gmail.com>
2016-11-04 10:48:38 -07:00
Misty Stanley-Jones d53c6798c9 Convert TOML to YAML, tweaks to work with Jekyll 2016-09-29 17:16:03 -07:00
Misty Stanley-Jones 9d5e59d503 Moved engine imported docs to the engine subdirectory 2016-09-29 11:19:31 -07:00