Merge pull request #2664 from crosbymichael/proc

estesp · web-flow · commit 7141ea3c0e11 · 2018-09-19T13:55:30.000-04:00
Add nosuid,noexec,nodev to proc
diff --git a/oci/spec.go b/oci/spec.go
@@ -167,6 +167,7 @@ func populateDefaultUnixSpec(ctx context.Context, s *Spec, id string) error {
 				Destination: "/proc",
 				Type:        "proc",
 				Source:      "proc",
+				Options:     []string{"nosuid", "noexec", "nodev"},
 			},
 			{
 				Destination: "/dev",

Original file line number	Diff line number	Diff line change
`@@ -167,6 +167,7 @@ func populateDefaultUnixSpec(ctx context.Context, s *Spec, id string) error {`
`167`	`167`	`Destination: "/proc",`
`168`	`168`	`Type: "proc",`
`169`	`169`	`Source: "proc",`
	`170`	`+ Options: []string{"nosuid", "noexec", "nodev"},`
`170`	`171`	`},`
`171`	`172`	`{`
`172`	`173`	`Destination: "/dev",`