4 ms·
Interesting. And quite annoying that Docker would disable ptrace(2) within its containers by default.
by downerending 7y ago
Interesting. And quite annoying that Docker would disable ptrace(2) within its containers by default.
- richardwhiuk 7y agoIt doesn't if you are running Linux 4.8 or above
- downerending 7y agoInteresting. Is this a change in Docker, or a change in the 4.8 kernel? Any idea why?
- richardwhiuk 7y agoDocker detects a different kernel, and that's a result of what I assume is a bug in Linux prior to 4.8 where you could get around a seccomp filter I believe.