Merge pull request #21286 from rhatdan/seccomp-man
Fix documentation on --security-opt seccomp Upstream-commit: b4da1578463f65b4703021b72ad17753fb29cdb4 Component: engine
This commit is contained in:
@ -608,6 +608,9 @@ with the same logic -- if the original volume was specified with a name it will
|
||||
to the container
|
||||
--security-opt="no-new-privileges" : Disable container processes from gaining
|
||||
new privileges
|
||||
--security-opt="seccomp:unconfined": Turn off seccomp confinement for the container
|
||||
--security-opt="seccomp:profile.json: White listed syscalls seccomp Json file to be used as a seccomp filter
|
||||
|
||||
|
||||
You can override the default labeling scheme for each container by specifying
|
||||
the `--security-opt` flag. For example, you can specify the MCS/MLS level, a
|
||||
|
||||
Reference in New Issue
Block a user