File tree Expand file tree Collapse file tree 2 files changed +3
-3
lines changed
content/manuals/engine/security Expand file tree Collapse file tree 2 files changed +3
-3
lines changed Original file line number Diff line number Diff line change @@ -28,7 +28,7 @@ in the Docker Engine source repository.
2828The ` docker-default ` profile is the default for running containers. It is
2929moderately protective while providing wide application compatibility. The
3030profile is generated from the following
31- [ template] ( https://github.com/moby/moby /blob/master/profiles /apparmor/template.go ) .
31+ [ template] ( https://github.com/moby/profiles /blob/main /apparmor/template.go ) .
3232
3333When you run a container, it uses the ` docker-default ` policy unless you
3434override it with the ` security-opt ` option. For example, the following
@@ -280,4 +280,4 @@ Advanced users and package managers can find a profile for `/usr/bin/docker`
280280in the Docker Engine source repository.
281281
282282The ` docker-default ` profile for containers lives in
283- [ profiles/apparmor] ( https://github.com/moby/moby/tree/master/profiles /apparmor ) .
283+ [ profiles/apparmor] ( https://github.com/moby/profiles/blob/main /apparmor ) .
Original file line number Diff line number Diff line change @@ -24,7 +24,7 @@ The default `seccomp` profile provides a sane default for running containers wit
2424seccomp and disables around 44 system calls out of 300+. It is moderately
2525protective while providing wide application compatibility. The default Docker
2626profile can be found
27- [ here] ( https://github.com/moby/moby /blob/master/profiles /seccomp/default.json ) .
27+ [ here] ( https://github.com/moby/profiles /blob/main /seccomp/default.json ) .
2828
2929In effect, the profile is an allowlist that denies access to system calls by
3030default and then allows specific system calls. The profile works by defining a
You can’t perform that action at this time.
0 commit comments