Potential wording error in the "Seccomp security profiles for Docker" chapter of the Docker Engine manual (allowlists) #21650
Description
Is this a docs issue?
- My issue is about the documentation content or website
Type of issue
Information is incorrect
Description
In the Pass a profile for a container section of the page:
In effect, the profile is an allowlist which denies access to system calls by default, then allowlists specific system calls.
The latter "allowlists" term seems to be used incorrectly.
Location
https://docs.docker.com/engine/security/seccomp/
Suggestion
...and should be replaced with "allows":
In effect, the profile is an allowlist which denies access to system calls by default, then allows specific system calls.
The Grammarly browser extension further improves the sentence to:
In effect, the profile is an allowlist that denies access to system calls by default and then allows specific system calls.
But whether to apply that is your call.