GitList

Browse code

Block original umount syscall in default seccomp filter

Arnaud Porterie authored on 2015/12/30 03:19:04
Showing 1 changed files

@@ -318,6 +318,12 @@ var defaultSeccompProfile = &configs.Seccomp{
                      		},
+                     		{
                      			// Deny umount
                     +			Name:   "umount",
                     +			Action: configs.Errno,
                     +			Args:   []*configs.Arg{},
                     +		},
                     +		{
                     +			// Deny umount
                      			Name:   "umount2",
                      			Action: configs.Errno,
                      			Args:   []*configs.Arg{},