Merge pull request #18969 from justincormack/vm86

Block vm86 syscalls in default seccomp profile Upstream-commit: a81e438544500a121298c82f340db490efda8a86 Component: engine
2015-12-29 11:57:35 -08:00
parent 44a3b715ef e76b5dd895
commit 1149d92821
1 changed files with 12 additions and 0 deletions
@@ -356,5 +356,17 @@ var defaultSeccompProfile = &configs.Seccomp{
 			Action: configs.Errno,
 			Args:   []*configs.Arg{},
 		},
+		{
+			// In kernel x86 real mode virtual machine
+			Name:   "vm86",
+			Action: configs.Errno,
+			Args:   []*configs.Arg{},
+		},
+		{
+			// In kernel x86 real mode virtual machine
+			Name:   "vm86old",
+			Action: configs.Errno,
+			Args:   []*configs.Arg{},
+		},
 	},
 }