Justin Cormack d8866a7bcc Add new syscalls in libseccomp 2.3.0 to seccomp default profile ...

This adds the following new syscalls that are supported in libseccomp 2.3.0,
including calls added up to kernel 4.5-rc4:
mlock2 - same as mlock but with a flag
copy_file_range - copy file contents, like splice but with reflink support.

The following are not added, and mentioned in docs:
userfaultfd - userspace page fault handling, mainly designed for process migration

The following are not added, only apply to less common architectures:
switch_endian
membarrier
breakpoint
set_tls
I plan to review the other architectures, some of which can now have seccomp
enabled in the build as they are now supported.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
Upstream-commit: 96896f2d0bc16269778dd4f60a4920b49953ffed
Component: engine

2016-03-16 21:17:32 +00:00

..

https

Fix doc format issue

2016-02-23 03:42:10 +00:00

trust

Fixing missing certs article; consolidating security material

2016-01-22 16:44:18 -08:00

apparmor.md

way better apparmor docs

2016-01-27 14:08:42 -08:00

certificates.md

Creating Engine specific menu

2016-01-26 15:58:53 -08:00

https.md

Fixing missing certs article; consolidating security material

2016-01-22 16:44:18 -08:00

index.md

Creating Engine specific menu

2016-01-26 15:58:53 -08:00

seccomp.md

Add new syscalls in libseccomp 2.3.0 to seccomp default profile

2016-03-16 21:17:32 +00:00

security.md

Update security.md with basic User Namespace info.

2016-02-24 20:53:00 +00:00