mirror of
https://github.com/docker/cli.git
synced 2026-09-26 17:30:51 -04:00
Fix documentation on --security-opt seccomp
Missing documentation and man pages on seccomp options. Signed-off-by: Dan Walsh <dwalsh@redhat.com>
This commit is contained in:
@@ -316,6 +316,15 @@ unit, `b` is used. Set LIMIT to `-1` to enable unlimited swap.
|
||||
**--security-opt**=[]
|
||||
Security Options
|
||||
|
||||
"label:user:USER" : Set the label user for the container
|
||||
"label:role:ROLE" : Set the label role for the container
|
||||
"label:type:TYPE" : Set the label type for the container
|
||||
"label:level:LEVEL" : Set the label level for the container
|
||||
"label:disable" : Turn off label confinement for the container
|
||||
"no-new-privileges" : Disable container processes from gaining additional privileges
|
||||
"seccomp:unconfined" : Turn off seccomp confinement for the container
|
||||
"seccomp:profile.json : White listed syscalls seccomp Json file to be used as a seccomp filter
|
||||
|
||||
**--stop-signal**=*SIGTERM*
|
||||
Signal to stop a container. Default is SIGTERM.
|
||||
|
||||
|
||||
@@ -468,8 +468,11 @@ its root filesystem mounted as read only prohibiting any writes.
|
||||
"label:type:TYPE" : Set the label type for the container
|
||||
"label:level:LEVEL" : Set the label level for the container
|
||||
"label:disable" : Turn off label confinement for the container
|
||||
|
||||
"no-new-privileges" : Disable container processes from gaining additional privileges
|
||||
|
||||
"seccomp:unconfined" : Turn off seccomp confinement for the container
|
||||
"seccomp:profile.json : White listed syscalls seccomp Json file to be used as a seccomp filter
|
||||
|
||||
**--stop-signal**=*SIGTERM*
|
||||
Signal to stop a container. Default is SIGTERM.
|
||||
|
||||
Reference in New Issue
Block a user