mirror of
https://github.com/docker/docs.git
synced 2026-03-28 14:58:53 +07:00
The existing description leads the reader to believe that dropping CAP_SYS_PTRACE already blocks all ptraces. That is not true, it only blocks ptracing arbitrary processes. Ptracing child processes is still allowed.