Justin Cormack a0a8ca0ae0 Block additional ptrace related syscalls in default seccomp profile ...

Block kcmp, procees_vm_readv, process_vm_writev.
All these require CAP_PTRACE, and are only used for ptrace related
actions, so are not useful as we block ptrace.

Signed-off-by: Justin Cormack <justin.cormack@unikernel.com>

2015-12-29 18:17:28 +00:00

..

template

Merge pull request #18395 from LK4D4/default_cgroup_is_not_daemon

2015-12-17 13:59:00 -08:00

apparmor.go

Enable ptrace in a container on apparmor below 2.9

2015-12-07 11:08:49 +01:00

create.go

add docs and unconfined to run a container without the default seccomp profile

2015-12-28 10:26:51 -08:00

driver_unsupported_nocgo.go

Fix golint warnings for daemon/execdriver/*

2015-07-28 08:43:22 +08:00

driver_unsupported.go

Fix golint warnings for daemon/execdriver/*

2015-07-28 08:43:22 +08:00

driver.go

Implemet docker update command

2015-12-28 19:19:26 +08:00

exec.go

Add user namespace (mapping) support to the Docker engine

2015-10-09 17:47:37 -04:00

info.go

Fix golint warnings for daemon/execdriver/*

2015-07-28 08:43:22 +08:00

init.go

Update libcontainer

2015-07-16 16:02:26 -07:00

seccomp_default.go

Block additional ptrace related syscalls in default seccomp profile

2015-12-29 18:17:28 +00:00

seccomp.go

set default seccomp profile

2015-12-28 10:18:47 -08:00

tmpfs.go

This patch adds --tmpfs as a option for mounting tmpfs on directories

2015-12-02 10:06:59 -05:00