docker
/
docs
mirror of https://github.com/docker/docs.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
20,892 Commits 21 Branches 28 Tags 816 MiB
Commit Graph

3 Commits

Author SHA1 Message Date
Justin Cormack 33568405f3 Block bpf syscall from default seccomp profile 
The bpf syscall can load code into the kernel which may
persist beyond container lifecycle. Requires CAP_SYS_ADMIN
already.

Signed-off-by: Justin Cormack <justin.cormack@unikernel.com>
 2015-12-29 17:28:30 +00:00
Jessica Frazelle b4c14a0bb8
fix code comment 
Signed-off-by: Jessica Frazelle <acidburn@docker.com>
 2015-12-28 22:36:54 -08:00
Jessica Frazelle 947293a280
set default seccomp profile 
Signed-off-by: Jessica Frazelle <acidburn@docker.com>
 2015-12-28 10:18:47 -08:00