fix code comment
Signed-off-by: Jessica Frazelle <acidburn@docker.com> Upstream-commit: b4c14a0bb846343c6d6d5dde6d9259c2c62a0b1e Component: engine
This commit is contained in:
@@ -235,7 +235,8 @@ var defaultSeccompProfile = &configs.Seccomp{
|
||||
Args: []*configs.Arg{},
|
||||
},
|
||||
{
|
||||
// Probably a bad idea to let containers restart
|
||||
// Probably a bad idea to let containers restart a syscall.
|
||||
// Possible seccomp bypass, see: https://code.google.com/p/chromium/issues/detail?id=408827.
|
||||
Name: "restart_syscall",
|
||||
Action: configs.Errno,
|
||||
Args: []*configs.Arg{},
|
||||
|
||||
Reference in New Issue
Block a user