Merge pull request #2664 from crosbymichael/proc

Add nosuid,noexec,nodev to proc
2018-09-19 13:55:30 -04:00
parent 5600adc86d 94c33d4f94
commit 7141ea3c0e
1 changed files with 1 additions and 0 deletions
--- a/oci/spec.go
+++ b/oci/spec.go
@@ -167,6 +167,7 @@ func populateDefaultUnixSpec(ctx context.Context, s *Spec, id string) error {
 				Destination: "/proc",
 				Type:        "proc",
 				Source:      "proc",
+				Options:     []string{"nosuid", "noexec", "nodev"},
 			},
 			{
 				Destination: "/dev",