Merge pull request #34445 from pmoust/f-seccomp-quotacl

seccomp: whitelist quotactl with CAP_SYS_ADMIN Upstream-commit: bbb401de87b21659399909b15707cf2816be0f78 Component: engine
2017-08-09 11:53:13 -07:00
parent 7b76095dc9 840bc1dc6a
commit 028f9b05af
2 changed files with 2 additions and 0 deletions
--- a/components/engine/profiles/seccomp/default.json
+++ b/components/engine/profiles/seccomp/default.json
@ -557,6 +557,7 @@
 				"mount",
 				"name_to_handle_at",
 				"perf_event_open",
+				"quotactl",
 				"setdomainname",
 				"sethostname",
 				"setns",
--- a/components/engine/profiles/seccomp/seccomp_default.go
+++ b/components/engine/profiles/seccomp/seccomp_default.go
@ -488,6 +488,7 @@ func DefaultProfile() *types.Seccomp {
 				"mount",
 				"name_to_handle_at",
 				"perf_event_open",
+				"quotactl",
 				"setdomainname",
 				"sethostname",
 				"setns",