Skip to content

Update name_to_handle_at syscall capability gate to CAP_DAC_READ_SEARCH  #6854

@nvcastet

Description

@nvcastet

As mentioned by @justincormack in issue moby/moby#37242:
name_to_handle_at syscall capability needed to be updated to "Already gated by CAP_DAC_READ_SEARCH."

File: engine/security/seccomp.md

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions