From b398f346a7e38451cacda1cfe54f1697d2685cdc Mon Sep 17 00:00:00 2001 From: Austin Vazquez Date: Fri, 25 Jul 2025 10:17:37 -0700 Subject: [PATCH] fix: link for moby container default capabilities Signed-off-by: Austin Vazquez --- content/manuals/engine/security/_index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/manuals/engine/security/_index.md b/content/manuals/engine/security/_index.md index 0929142d81..2c949d2ffd 100644 --- a/content/manuals/engine/security/_index.md +++ b/content/manuals/engine/security/_index.md @@ -194,7 +194,7 @@ to the host. This doesn't affect regular web apps, but reduces the vectors of attack by malicious users considerably. By default Docker drops all capabilities except [those -needed](https://github.com/moby/moby/blob/master/oci/caps/defaults.go#L6-L19), +needed](https://github.com/moby/moby/blob/master/daemon/pkg/oci/caps/defaults.go#L6-L19), an allowlist instead of a denylist approach. You can see a full list of available capabilities in [Linux manpages](https://man7.org/linux/man-pages/man7/capabilities.7.html).