Merge pull request moby#43490 from Bonjourz/43481_support_pku

seccomp: Support PKU in docker by default
lingoubb · Jul 13, 2022 · dc4ab45 · dc4ab45
2 parents a26d82c + e258d66
commit dc4ab45
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/profiles/seccomp/default.json b/profiles/seccomp/default.json
@@ -248,6 +248,9 @@
 				"pidfd_send_signal",
 				"pipe",
 				"pipe2",
+				"pkey_alloc",
+				"pkey_free",
+				"pkey_mprotect",
 				"poll",
 				"ppoll",
 				"ppoll_time64",

diff --git a/profiles/seccomp/default_linux.go b/profiles/seccomp/default_linux.go
@@ -240,6 +240,9 @@ func DefaultProfile() *Seccomp {
 					"pidfd_send_signal",
 					"pipe",
 					"pipe2",
+					"pkey_alloc",
+					"pkey_free",
+					"pkey_mprotect",
 					"poll",
 					"ppoll",
 					"ppoll_time64",