diff --git a/engine/security/seccomp.md b/engine/security/seccomp.md index 01e677c18f..c001f28c7a 100644 --- a/engine/security/seccomp.md +++ b/engine/security/seccomp.md @@ -29,7 +29,7 @@ The default `seccomp` profile provides a sane default for running containers wit seccomp and disables around 44 system calls out of 300+. It is moderately protective while providing wide application compatibility. The default Docker profile can be found -[here](https://github.com/moby/moby/blob/master/profiles/seccomp/default.json)). +[here](https://github.com/moby/moby/blob/master/profiles/seccomp/default.json). In effect, the profile is a whitelist which denies access to system calls by default, then whitelists specific system calls. The profile works by defining a