Justin Cormack 55ebb7bfa4 Block clock_adjtime in default seccomp config ...

clock_adjtime is the new posix style version of adjtime allowing
a specific clock to be specified. Time is not namespaced, so do
not allow.

Signed-off-by: Justin Cormack <justin.cormack@unikernel.com>
Upstream-commit: 0e5c43cddad304301ca8a82f652e15f75ee68cfe
Component: engine

2015-12-29 12:48:16 +00:00

..

template

Merge pull request #18395 from LK4D4/default_cgroup_is_not_daemon

2015-12-17 13:59:00 -08:00

apparmor.go

Enable ptrace in a container on apparmor below 2.9

2015-12-07 11:08:49 +01:00

create.go

add docs and unconfined to run a container without the default seccomp profile

2015-12-28 10:26:51 -08:00

driver_unsupported_nocgo.go

Fix golint warnings for daemon/execdriver/*

2015-07-28 08:43:22 +08:00

driver_unsupported.go

Fix golint warnings for daemon/execdriver/*

2015-07-28 08:43:22 +08:00

driver.go

Implemet docker update command

2015-12-28 19:19:26 +08:00

exec.go

Add user namespace (mapping) support to the Docker engine

2015-10-09 17:47:37 -04:00

info.go

Fix golint warnings for daemon/execdriver/*

2015-07-28 08:43:22 +08:00

init.go

Update libcontainer

2015-07-16 16:02:26 -07:00

seccomp_default.go

Block clock_adjtime in default seccomp config

2015-12-29 12:48:16 +00:00

seccomp.go

set default seccomp profile

2015-12-28 10:18:47 -08:00

tmpfs.go

This patch adds --tmpfs as a option for mounting tmpfs on directories

2015-12-02 10:06:59 -05:00