#3 Update docker.service
Closed 5 years ago by fatherlinux. Opened 5 years ago by fatherlinux.
rpms/ fatherlinux/moby-engine master  into  master

file modified
+1
@@ -14,6 +14,7 @@ 

  ExecStart=/usr/bin/dockerd \

            --host=fd:// \

            --exec-opt native.cgroupdriver=systemd \

+           --selinux-enabled \

            $OPTIONS

  ExecReload=/bin/kill -s HUP $MAINPID

  # Having non-zero Limit*s causes performance problems due to accounting overhead

Added selinux-enabled default start option

Added default option for daemon start to protect against runc CVE.

Pull-Request has been closed by fatherlinux

5 years ago