Commit Graph

36 Commits

Author SHA1 Message Date
Usha Mandya
e73cdcf0f1 More updates related to subscription changes, address review comments
Signed-off-by: Usha Mandya <usha.mandya@docker.com>
2021-08-31 14:35:21 +00:00
Sebastiaan van Stijn
6332424085 Merge pull request #12920 from cc-wr/bugfix/fix-seccomp-typo
Fix apparent typo regarding seccomp filtering for the syscall clone
2021-08-27 17:33:26 +02:00
Sebastiaan van Stijn
1583678203 Add missing code-hints, and minor markdown edits
- Add missing code-hints (console, yaml)
- Consistently add an empty line after code-blocks
- Combine some examples where the output and the command were
  put in separate blocks. With the "console" code-hint, this
  is no longer nescessary.
- fix indentation in cloud/ecs-integration.md, which caused the
  numbered-list to be interrupted.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2021-08-16 12:59:23 +02:00
Sebastiaan van Stijn
9991771180 engine/security: use "console" for shell examples
This allows for easier copying of the commands, without selecting the
prompt.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2021-08-06 17:20:01 +02:00
cc-wr
8ed0aa5316 Fix apparent typo. I do not believe CLONE_USERNS is a flag that actually exists. Based on the context, I believe CLONE_NEWUSER was the intended flag. 2021-05-31 05:17:59 -05:00
Jan Kanis
b4ab954d3f fix description for ptrace in seccomp.md
The existing description leads the reader to believe that dropping CAP_SYS_PTRACE already blocks all ptraces. That is not true, it only blocks ptracing arbitrary processes. Ptracing child processes is still allowed.
2020-05-22 13:36:45 +02:00
Sourabh Shirhatti
6f893ed1c6 s/CAP_PTRACE/CAP_SYS_PTRACE 2020-05-04 14:03:02 -05:00
Sebastiaan van Stijn
777c5d23da engine: use relative markdown links
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-04-23 13:03:32 +02:00
Sebastiaan van Stijn
91c5d19a14 Merge pull request #9662 from pjbgf/patch-2
Remove ptrace from blocked syscalls
2019-12-03 16:28:20 +01:00
Paulo Gomes
9c2520fa27 Fix table 2019-11-28 12:33:15 +00:00
Paulo Gomes
1962410b61 Corrections based on feedback 2019-11-28 12:30:44 +00:00
Paulo Gomes
432b7c4134 Improve clarity. 2019-11-28 09:06:03 +00:00
Paulo Gomes
2adcf3bd66 Add minKernel details for ptrace
Changes brought up by commit:

1124543ca8 (diff-0ebf5796a57d68894d5550c407061035)
2019-10-29 14:51:22 +00:00
Paulo Gomes
5c0c1eed40 Remove ptrace from blocked syscalls
Update documentation to reflect that ptrace is no longer blocked on the default profile.

More information:
1124543ca8 (diff-0ebf5796a57d68894d5550c407061035)
2019-10-17 09:59:47 +01:00
Paulo Gomes
d32f93ca93 Remove reference to socket and socketcall 2019-10-17 09:53:28 +01:00
Paulo Gomes
04b5f87b28 Remove socket from blocked syscalls
Socket syscalls are no longer blocked on the default profile for a while now. More information: 
dcf2632945 (diff-0ebf5796a57d68894d5550c407061035)
2019-10-17 09:44:40 +01:00
Wang Jie
8a8ea7d666 Update seccomp.md 2019-03-25 09:35:26 +08:00
nvcastet
ac941e6b03 Update seccomp.md
Fix #6854
2018-06-11 09:16:15 -05:00
Bryan Thornbury
f32bbe902d Remove adjtimex. (#6032) 2018-05-10 09:40:37 -07:00
Gionni
5bb6473a72 less is more - avoid cat to grep something. (#6383) 2018-04-06 11:07:06 -07:00
gbarr01
22852c0b21 Update seccomp note and remove ref to Fedora 22 2018-01-02 17:13:00 -08:00
Wang Jie
8535b0f07d Update seccomp.md (#4518) 2017-09-11 17:00:00 -07:00
Bill
a3a7ae1e0b replaced docker/docker with moby/moby (#2879)
* replaced docker/docker with moby/moby

* fixed incorrect name changes in release notes

* fixed mentions of moby/moby in code
2017-04-20 15:32:18 -05:00
Misty Stanley-Jones
730ec4717d Document new rules for seccomp profile 2017-04-05 17:45:44 -07:00
Misty Stanley-Jones
7b24cef2c1 Merge pull request #1880 from scjane/patch-40
Update seccomp.md
2017-02-22 10:08:41 -08:00
scjane
80483cd487 Update seccomp.md (#1879) 2017-02-21 18:50:42 -08:00
scjane
1dc6441a6a Update seccomp.md 2017-02-21 16:15:53 +08:00
Sebastiaan van Stijn
d2826a8995 Add engine changes that were lost in syncing
When syncing docs from the docker/docker repository (e4bce35ac2)
some commits were not included. This includes those changes, by copying the documentation from

8658748ef7,
which is the last commit before the docs were removed from the docker/docker
repository in 29f08cf49b

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2017-01-19 10:16:52 -08:00
Sebastiaan van Stijn
8f8b4a25fe Remove Ubuntu 15.10 Wily Werewolf
As of July 28, 2016, Ubuntu 15.10 is officially EOL
(https://lists.ubuntu.com/archives/ubuntu-announce/2016-July/000210.html),
and will receive no further updates.

Support for 15.10 was removed in Docker 1.13 through
https://github.com/docker/docker/pull/27042

(e9a8105708)

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2017-01-19 10:16:51 -08:00
Misty Stanley-Jones
e3a3145cd9 Sync vnext-engine branch to docker/docker SHA 2f12d2808464dcfdf45e0920fd508ce0ff12bd29
This branch will contain forward-looking Engine-specific docs
and be the equivalent of docker/docker master for docs
2017-01-19 10:10:15 -08:00
Gaetan
a5e01e1844 fix type of keywords entry in frontmatter (in /engine/) (#552)
keywords should be a string, not an array containing one string

Signed-off-by: Gaetan de Villele <gdevillele@gmail.com>
2016-11-11 14:45:24 -08:00
John Mulhausen
558314bf56 Converges titles to imperative-form, front-matter based, and sentence-case (#438)
Multiple title fixes, consistency fixes, convergence into metadata-based titles.
2016-11-04 15:38:40 -07:00
Misty Stanley-Jones
1a193d749b Revert "Merge pull request #437 from gdevillele/fix_keywords_format"
This reverts commit 13ddc1350e, reversing
changes made to 7a11f05943.
2016-11-04 13:33:29 -07:00
Gaetan
8bb4d6226a fix more frontmatter keywords values (#439)
* fix format of frontmatter keyword entry in some .md files

Signed-off-by: Gaetan de Villele <gdevillele@gmail.com>
2016-11-04 10:48:38 -07:00
Misty Stanley-Jones
d53c6798c9 Convert TOML to YAML, tweaks to work with Jekyll 2016-09-29 17:16:03 -07:00
Misty Stanley-Jones
9d5e59d503 Moved engine imported docs to the engine subdirectory 2016-09-29 11:19:31 -07:00