Add nosuid,noexec,nodev to proc

This is to match the same mount options as the host. Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2018-09-19 13:29:56 -04:00 · 2018-09-19 13:29:56 -04:00 · 94c33d4f94
commit 94c33d4f94
parent 1ac5ac652b
1 changed files with 1 additions and 0 deletions
--- a/oci/spec.go
+++ b/oci/spec.go
@ -167,6 +167,7 @@ func populateDefaultUnixSpec(ctx context.Context, s *Spec, id string) error {
 				Destination: "/proc",
 				Type:        "proc",
 				Source:      "proc",
+				Options:     []string{"nosuid", "noexec", "nodev"},
 			},
 			{
 				Destination: "/dev",