Skip to content

Commit 2912902

Browse files
committed
update filtered syscalls
Signed-off-by: Vitor Anjos <[email protected]>
1 parent 6dd9522 commit 2912902

1 file changed

Lines changed: 0 additions & 1 deletion

File tree

engine/security/seccomp.md

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -80,7 +80,6 @@ the reason each syscall is blocked rather than white-listed.
8080
| `mbind` | Syscall that modifies kernel memory and NUMA settings. Already gated by `CAP_SYS_NICE`. |
8181
| `mount` | Deny mounting, already gated by `CAP_SYS_ADMIN`. |
8282
| `move_pages` | Syscall that modifies kernel memory and NUMA settings. |
83-
| `name_to_handle_at` | Sister syscall to `open_by_handle_at`. Already gated by `CAP_DAC_READ_SEARCH`. |
8483
| `nfsservctl` | Deny interaction with the kernel nfs daemon. Obsolete since Linux 3.1. |
8584
| `open_by_handle_at` | Cause of an old container breakout. Also gated by `CAP_DAC_READ_SEARCH`. |
8685
| `perf_event_open` | Tracing/profiling syscall, which could leak a lot of information on the host. |

0 commit comments

Comments
 (0)