Florian Schmaus e977564a8b seccomp: allow 'rseq' syscall in default seccomp profile ...

Restartable Sequences (rseq) are a kernel-based mechanism for fast
update operations on per-core data in user-space. Some libraries, like
the newest version of Google's TCMalloc, depend on it [1].

This also makes dockers default seccomp profile on par with systemd's,
which enabled 'rseq' in early 2019 [2].

1: https://google.github.io/tcmalloc/design.html
2: systemd/systemd@6fee3be

Signed-off-by: Florian Schmaus <flo@geekplace.eu>

2020-06-26 17:10:05 +02:00

..

seccomp_default_unsupported.go

Update usage of whitelist in project

2020-06-08 12:49:22 -05:00

seccomp_default.go

seccomp: allow 'rseq' syscall in default seccomp profile

2020-06-26 17:10:05 +02:00

seccomp.go

Add --seccomp flag to ctr

2019-08-29 13:02:21 -04:00