Add Exception for Dovetail Docker-Compose File 77/52377/1
authorTrevor Bramwell <tbramwell@linuxfoundation.org>
Tue, 20 Feb 2018 18:26:31 +0000 (10:26 -0800)
committerTrevor Bramwell <tbramwell@linuxfoundation.org>
Tue, 20 Feb 2018 18:26:31 +0000 (10:26 -0800)
The socket mount to '/tmp' is used by the jwilder/nginx-proxy container
to query the Docker daemon in order to automatically create nginx
configs for a container.

Change-Id: I3368ad7f77914811e30e98db278e8d6550df653c
Signed-off-by: Trevor Bramwell <tbramwell@linuxfoundation.org>
exceptions/dovetail.yaml

index 12430cd..47ff086 100644 (file)
@@ -53,4 +53,5 @@ binaries:
 
 file_audits:
   file_names: [nullvalue]
-  file_contents: [nullvalue]
+  file_contents:
+    - '\/var\/run\/docker\.sock\:\/tmp\/docker\.sock\:ro'