Merge pull request #21286 from rhatdan/seccomp-man

Fix documentation on --security-opt seccomp
Upstream-commit: b4da1578463f65b4703021b72ad17753fb29cdb4
Component: engine
This commit is contained in:
David Calavera
2016-03-17 10:29:33 -07:00
3 changed files with 15 additions and 0 deletions

View File

@ -608,6 +608,9 @@ with the same logic -- if the original volume was specified with a name it will
to the container
--security-opt="no-new-privileges" : Disable container processes from gaining
new privileges
--security-opt="seccomp:unconfined": Turn off seccomp confinement for the container
--security-opt="seccomp:profile.json: White listed syscalls seccomp Json file to be used as a seccomp filter
You can override the default labeling scheme for each container by specifying
the `--security-opt` flag. For example, you can specify the MCS/MLS level, a