File tree Expand file tree Collapse file tree 2 files changed +3
-3
lines changed
content/manuals/engine/security Expand file tree Collapse file tree 2 files changed +3
-3
lines changed Original file line number Diff line number Diff line change @@ -28,7 +28,7 @@ in the Docker Engine source repository.
28
28
The ` docker-default ` profile is the default for running containers. It is
29
29
moderately protective while providing wide application compatibility. The
30
30
profile is generated from the following
31
- [ template] ( https://github.com/moby/moby /blob/master/profiles /apparmor/template.go ) .
31
+ [ template] ( https://github.com/moby/profiles /blob/main /apparmor/template.go ) .
32
32
33
33
When you run a container, it uses the ` docker-default ` policy unless you
34
34
override it with the ` security-opt ` option. For example, the following
@@ -280,4 +280,4 @@ Advanced users and package managers can find a profile for `/usr/bin/docker`
280
280
in the Docker Engine source repository.
281
281
282
282
The ` docker-default ` profile for containers lives in
283
- [ profiles/apparmor] ( https://github.com/moby/moby/tree/master/profiles /apparmor ) .
283
+ [ profiles/apparmor] ( https://github.com/moby/profiles/blob/main /apparmor ) .
Original file line number Diff line number Diff line change @@ -24,7 +24,7 @@ The default `seccomp` profile provides a sane default for running containers wit
24
24
seccomp and disables around 44 system calls out of 300+. It is moderately
25
25
protective while providing wide application compatibility. The default Docker
26
26
profile can be found
27
- [ here] ( https://github.com/moby/moby /blob/master/profiles /seccomp/default.json ) .
27
+ [ here] ( https://github.com/moby/profiles /blob/main /seccomp/default.json ) .
28
28
29
29
In effect, the profile is an allowlist that denies access to system calls by
30
30
default and then allows specific system calls. The profile works by defining a
You can’t perform that action at this time.
0 commit comments