Merge pull request #18969 from justincormack/vm86

Block vm86 syscalls in default seccomp profile
2015-12-29 11:57:35 -08:00 · 2015-12-29 11:57:35 -08:00 · a81e438544
commit a81e438544
parent 2307f47fdd 6c3ea7a511
1 changed files with 12 additions and 0 deletions
--- a/daemon/execdriver/native/seccomp_default.go
+++ b/daemon/execdriver/native/seccomp_default.go
@ -356,5 +356,17 @@ var defaultSeccompProfile = &configs.Seccomp{
 			Action: configs.Errno,
 			Args:   []*configs.Arg{},
 		},
+		{
+			// In kernel x86 real mode virtual machine
+			Name:   "vm86",
+			Action: configs.Errno,
+			Args:   []*configs.Arg{},
+		},
+		{
+			// In kernel x86 real mode virtual machine
+			Name:   "vm86old",
+			Action: configs.Errno,
+			Args:   []*configs.Arg{},
+		},
 	},
 }