Sfoglia il codice sorgente

Merge pull request #43490 from Bonjourz/43481_support_pku

seccomp: Support PKU in docker by default
Tianon Gravi 3 anni fa
parent
commit
dc4ab45e05
2 ha cambiato i file con 6 aggiunte e 0 eliminazioni
  1. 3 0
      profiles/seccomp/default.json
  2. 3 0
      profiles/seccomp/default_linux.go

+ 3 - 0
profiles/seccomp/default.json

@@ -248,6 +248,9 @@
 				"pidfd_send_signal",
 				"pidfd_send_signal",
 				"pipe",
 				"pipe",
 				"pipe2",
 				"pipe2",
+				"pkey_alloc",
+				"pkey_free",
+				"pkey_mprotect",
 				"poll",
 				"poll",
 				"ppoll",
 				"ppoll",
 				"ppoll_time64",
 				"ppoll_time64",

+ 3 - 0
profiles/seccomp/default_linux.go

@@ -240,6 +240,9 @@ func DefaultProfile() *Seccomp {
 					"pidfd_send_signal",
 					"pidfd_send_signal",
 					"pipe",
 					"pipe",
 					"pipe2",
 					"pipe2",
+					"pkey_alloc",
+					"pkey_free",
+					"pkey_mprotect",
 					"poll",
 					"poll",
 					"ppoll",
 					"ppoll",
 					"ppoll_time64",
 					"ppoll_time64",