mirror of
https://github.com/docker/docs.git
synced 2026-10-31 10:34:26 +03:00
The existing description leads the reader to believe that dropping CAP_SYS_PTRACE already blocks all ptraces. That is not true, it only blocks ptracing arbitrary processes. Ptracing child processes is still allowed.