Add /proc/acpi to masked paths

relates to CVE-2018-10892 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2018-07-06 18:34:08 +02:00
parent e01779a0da
commit 8b42adeddc
1 changed files with 1 additions and 0 deletions
--- a/oci/spec_unix.go
+++ b/oci/spec_unix.go
@@ -153,6 +153,7 @@ func createDefaultSpec(ctx context.Context, id string) (*Spec, error) {
 		},
 		Linux: &specs.Linux{
 			MaskedPaths: []string{
+				"/proc/acpi",
 				"/proc/kcore",
 				"/proc/latency_stats",
 				"/proc/timer_list",