beenull/moby
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge pull request #43199 from Xyene/allow-landlock

Browse source 
seccomp: add support for Landlock syscalls in default policy
This commit is contained in:
Sebastiaan van Stijn 2022-05-13 10:18:45 +02:00 committed by GitHub
commit e9712464ad
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
profiles/seccomp/default.json
View file

@ -183,6 +183,9 @@
"io_uring_setup",
"ipc",
"kill",
"landlock_add_rule",
"landlock_create_ruleset",
"landlock_restrict_self",
"lchown",
"lchown32",
"lgetxattr",

3
profiles/seccomp/default_linux.go
View file

@ -175,6 +175,9 @@ func DefaultProfile() *Seccomp {
"io_uring_setup",
"ipc",
"kill",
"landlock_add_rule",
"landlock_create_ruleset",
"landlock_restrict_self",
"lchown",
"lchown32",
"lgetxattr",