We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 6dd9522 commit 2912902Copy full SHA for 2912902
1 file changed
engine/security/seccomp.md
@@ -80,7 +80,6 @@ the reason each syscall is blocked rather than white-listed.
80
| `mbind` | Syscall that modifies kernel memory and NUMA settings. Already gated by `CAP_SYS_NICE`. |
81
| `mount` | Deny mounting, already gated by `CAP_SYS_ADMIN`. |
82
| `move_pages` | Syscall that modifies kernel memory and NUMA settings. |
83
-| `name_to_handle_at` | Sister syscall to `open_by_handle_at`. Already gated by `CAP_DAC_READ_SEARCH`. |
84
| `nfsservctl` | Deny interaction with the kernel nfs daemon. Obsolete since Linux 3.1. |
85
| `open_by_handle_at` | Cause of an old container breakout. Also gated by `CAP_DAC_READ_SEARCH`. |
86
| `perf_event_open` | Tracing/profiling syscall, which could leak a lot of information on the host. |
0 commit comments