remove seccomp from seccomp profile
This can be allowed because it should only restrict more per the seccomp docs, and multiple apps use it today. Signed-off-by: Jessica Frazelle <acidburn@docker.com> Upstream-commit: b610fc226afdf663b0ad46ad982c27fdee61f671 Component: engine
This commit is contained in:
@ -254,12 +254,6 @@ var defaultSeccompProfile = &configs.Seccomp{
|
||||
Action: configs.Errno,
|
||||
Args: []*configs.Arg{},
|
||||
},
|
||||
{
|
||||
// meta, deny seccomp
|
||||
Name: "seccomp",
|
||||
Action: configs.Errno,
|
||||
Args: []*configs.Arg{},
|
||||
},
|
||||
{
|
||||
// Terrifying syscalls that modify kernel memory and NUMA settings.
|
||||
// They're gated by CAP_SYS_NICE,
|
||||
|
||||
Reference in New Issue
Block a user