Justin Cormack c1b57fc1c9 Do not allow name_to_handle_at, as we have already blocked open_by_handle_at ...

Being able to obtain a file handle is no use as we cannot perform
any operation in it, and it may leak kernel state.

Signed-off-by: Justin Cormack <justin.cormack@unikernel.com>

2016-01-04 11:55:27 -08:00

..

template

Merge pull request #18395 from LK4D4/default_cgroup_is_not_daemon

2015-12-17 13:59:00 -08:00

apparmor.go

Enable ptrace in a container on apparmor below 2.9

2015-12-07 11:08:49 +01:00

create.go

add docs and unconfined to run a container without the default seccomp profile

2015-12-28 10:26:51 -08:00

driver_unsupported_nocgo.go

Fix declarations of of execdriver/native.NewDriver to have the same signature.

2016-01-02 19:55:37 +01:00

driver_unsupported.go

Fix declarations of of execdriver/native.NewDriver to have the same signature.

2016-01-02 19:55:37 +01:00

driver.go

Implemet docker update command

2015-12-28 19:19:26 +08:00

exec.go

Add user namespace (mapping) support to the Docker engine

2015-10-09 17:47:37 -04:00

info.go

Fix golint warnings for daemon/execdriver/*

2015-07-28 08:43:22 +08:00

init.go

Update libcontainer

2015-07-16 16:02:26 -07:00

seccomp_default.go

Do not allow name_to_handle_at, as we have already blocked open_by_handle_at

2016-01-04 11:55:27 -08:00

seccomp_unsupported.go

fix default profile where unsupported

2015-12-28 20:42:15 -08:00

seccomp.go

set default seccomp profile

2015-12-28 10:18:47 -08:00

tmpfs.go

This patch adds --tmpfs as a option for mounting tmpfs on directories

2015-12-02 10:06:59 -05:00