fix code comment

Signed-off-by: Jessica Frazelle <acidburn@docker.com>
Upstream-commit: b4c14a0bb846343c6d6d5dde6d9259c2c62a0b1e
Component: engine
This commit is contained in:
Jessica Frazelle
2015-12-28 22:36:54 -08:00
parent f07bb00458
commit bc484831ec
@@ -235,7 +235,8 @@ var defaultSeccompProfile = &configs.Seccomp{
Args: []*configs.Arg{},
},
{
// Probably a bad idea to let containers restart
// Probably a bad idea to let containers restart a syscall.
// Possible seccomp bypass, see: https://code.google.com/p/chromium/issues/detail?id=408827.
Name: "restart_syscall",
Action: configs.Errno,
Args: []*configs.Arg{},