Justin Cormack d33f2d3ddd Block stime in default seccomp profile ...

The stime syscall is a legacy syscall on some architectures
to set the clock, should be blocked as time is not namespaced.

Signed-off-by: Justin Cormack <justin.cormack@unikernel.com>
Upstream-commit: 6300a08be905969b16197f6a82a3d0d99a3f99cd
Component: engine

2015-12-29 15:28:05 +00:00

components/engine

Block stime in default seccomp profile

2015-12-29 15:28:05 +00:00

S

Description

The Docker CLI

clidocker

360 MiB

Languages

Go 92.3%

Shell 5.4%

Dockerfile 1.1%

Go-Checksums 0.7%

Makefile 0.3%

Other 0.2%