From 2c12c040cda325944778fb35804da1ed5a270ed7 Mon Sep 17 00:00:00 2001 From: Justin Cormack Date: Sun, 3 Jan 2016 20:31:43 +0000 Subject: [PATCH] Do not allow obsolete syscalls sysfs and ustat syscalls are marked obsolete. Signed-off-by: Justin Cormack Upstream-commit: d6a9c5abed7370d9ef20b488e315b9730f22ed44 Component: engine --- .../engine/daemon/execdriver/native/seccomp_default.go | 10 ---------- 1 file changed, 10 deletions(-) diff --git a/components/engine/daemon/execdriver/native/seccomp_default.go b/components/engine/daemon/execdriver/native/seccomp_default.go index fdd7fee457..5f52b9f2f8 100644 --- a/components/engine/daemon/execdriver/native/seccomp_default.go +++ b/components/engine/daemon/execdriver/native/seccomp_default.go @@ -1363,11 +1363,6 @@ var defaultSeccompProfile = &configs.Seccomp{ Action: configs.Allow, Args: []*configs.Arg{}, }, - { - Name: "sysfs", - Action: configs.Allow, - Args: []*configs.Arg{}, - }, { Name: "sysinfo", Action: configs.Allow, @@ -1478,11 +1473,6 @@ var defaultSeccompProfile = &configs.Seccomp{ Action: configs.Allow, Args: []*configs.Arg{}, }, - { - Name: "ustat", - Action: configs.Allow, - Args: []*configs.Arg{}, - }, { Name: "utime", Action: configs.Allow,