Explicitly set rw for privileged container.

Signed-off-by: Lantao Liu <lantaol@google.com>
2018-05-07 15:13:14 -07:00
parent 5f4035ae2f
commit a5d1332e8f
2 changed files with 5 additions and 5 deletions
--- a/pkg/server/container_create.go
+++ b/pkg/server/container_create.go
@@ -523,7 +523,7 @@ func clearReadOnly(m *runtimespec.Mount) {
 			opt = append(opt, o)
 		}
 	}
-	m.Options = opt
+	m.Options = append(opt, "rw")
 }

 // addDevices set device mapping without privilege.