p4u1/docker-cli
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Whitelist adjtimex get operation. Adjustment operations are gated by CAP_SYS_TIME

Browse Source 
Signed-off-by: Miklos Szegedi <miklos.szegedi@cloudera.com>
Upstream-commit: 2db05316d09214f5cd6de24e9f17784cbc2f2573
Component: engine
This commit is contained in:
Miklos Szegedi
2017-05-22 22:42:47 -07:00
committed by root
parent cb8736d49e
commit 048c29d376
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
components/engine/profiles/seccomp/default.json
View File

@ -55,6 +55,7 @@
"accept",
"accept4",
"access",
"adjtimex",
"alarm",
"alarm",
"bind",
@ -719,7 +720,6 @@
"names": [
"settimeofday",
"stime",
"adjtimex",
"clock_settime"
],
"action": "SCMP_ACT_ALLOW",

2
components/engine/profiles/seccomp/seccomp_default.go
View File

@ -49,6 +49,7 @@ func DefaultProfile() *types.Seccomp {
"accept",
"accept4",
"access",
"adjtimex",
"alarm",
"alarm",
"bind",
@ -611,7 +612,6 @@ func DefaultProfile() *types.Seccomp {
Names: []string{
"settimeofday",
"stime",
"adjtimex",
"clock_settime",
},
Action: types.ActAllow,