Signed-off-by: Kai Qiang Wu(Kennan) <wkqwu@cn.ibm.com>
(cherry picked from commit 0b207e75585cd4ba9a40460d87766052dd7508a7)
| ... | ... |
@@ -608,8 +608,8 @@ with the same logic -- if the original volume was specified with a name it will |
| 608 | 608 |
to the container |
| 609 | 609 |
--security-opt="no-new-privileges" : Disable container processes from gaining |
| 610 | 610 |
new privileges |
| 611 |
- --security-opt="seccomp:unconfined": Turn off seccomp confinement for the container |
|
| 612 |
- --security-opt="seccomp:profile.json: White listed syscalls seccomp Json file to be used as a seccomp filter |
|
| 611 |
+ --security-opt="seccomp=unconfined": Turn off seccomp confinement for the container |
|
| 612 |
+ --security-opt="seccomp=profile.json: White listed syscalls seccomp Json file to be used as a seccomp filter |
|
| 613 | 613 |
|
| 614 | 614 |
|
| 615 | 615 |
You can override the default labeling scheme for each container by specifying |