remove seccomp from seccomp profile
This can be allowed because it should only restrict more per the seccomp docs, and multiple apps use it today. Signed-off-by: Jessica Frazelle <acidburn@docker.com>
This commit is contained in:
parent
194e69507b
commit
b610fc226a
1 changed files with 0 additions and 6 deletions
|
@ -254,12 +254,6 @@ var defaultSeccompProfile = &configs.Seccomp{
|
|||
Action: configs.Errno,
|
||||
Args: []*configs.Arg{},
|
||||
},
|
||||
{
|
||||
// meta, deny seccomp
|
||||
Name: "seccomp",
|
||||
Action: configs.Errno,
|
||||
Args: []*configs.Arg{},
|
||||
},
|
||||
{
|
||||
// Terrifying syscalls that modify kernel memory and NUMA settings.
|
||||
// They're gated by CAP_SYS_NICE,
|
||||
|
|
Loading…
Reference in a new issue