github/containerd
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 2 Wiki Activity

Add nosuid,noexec,nodev to proc

Browse Source 
This is to match the same mount options as the host.

Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
This commit is contained in:
Michael Crosby 2018-09-19 13:29:56 -04:00
parent 1ac5ac652b
commit 94c33d4f94
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
oci/spec.go
View File

@ -167,6 +167,7 @@ func populateDefaultUnixSpec(ctx context.Context, s *Spec, id string) error {
Destination: "/proc", Destination: "/proc",
Type: "proc", Type: "proc",
Source: "proc", Source: "proc",
Options: []string{"nosuid", "noexec", "nodev"},
}, },
{ {
Destination: "/dev", Destination: "/dev",