summaryrefslogtreecommitdiff
path: root/profiles
diff options
context:
space:
mode:
authorAkihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>2020-05-20 00:31:32 +0900
committerGitHub <noreply@github.com>2020-05-20 00:31:32 +0900
commitb2917efb1a446de6f9d0651723a1bad760a0ccbc (patch)
tree0979cc5a8a6cde4044ee9749a30305d45617818d /profiles
parent50867791d639adbbde6016f3c67e8169e45d47ba (diff)
parent1026f873a47c88bc0dd617402ae3c1247a4117a2 (diff)
downloaddocker-b2917efb1a446de6f9d0651723a1bad760a0ccbc.tar.gz
Merge pull request #40731 from sqreen/fix/seccomp-profile
seccomp: allow syscall membarrier
Diffstat (limited to 'profiles')
-rw-r--r--profiles/seccomp/default.json1
-rw-r--r--profiles/seccomp/seccomp_default.go1
2 files changed, 2 insertions, 0 deletions
diff --git a/profiles/seccomp/default.json b/profiles/seccomp/default.json
index e6932a9539..b50a5841c6 100644
--- a/profiles/seccomp/default.json
+++ b/profiles/seccomp/default.json
@@ -194,6 +194,7 @@
"lstat",
"lstat64",
"madvise",
+ "membarrier",
"memfd_create",
"mincore",
"mkdir",
diff --git a/profiles/seccomp/seccomp_default.go b/profiles/seccomp/seccomp_default.go
index 84c005ec2b..e2b52475bb 100644
--- a/profiles/seccomp/seccomp_default.go
+++ b/profiles/seccomp/seccomp_default.go
@@ -187,6 +187,7 @@ func DefaultProfile() *types.Seccomp {
"lstat",
"lstat64",
"madvise",
+ "membarrier",
"memfd_create",
"mincore",
"mkdir",