Add nosuid,noexec,nodev to proc

crosbymichael · crosbymichael · commit 94c33d4f9466 · 2018-09-19T13:29:56.000-04:00
This is to match the same mount options as the host.

Signed-off-by: Michael Crosby &lt;crosbymichael@gmail.com&gt;
diff --git a/oci/spec.go b/oci/spec.go
@@ -167,6 +167,7 @@ func populateDefaultUnixSpec(ctx context.Context, s *Spec, id string) error {
 				Destination: "/proc",
 				Type:        "proc",
 				Source:      "proc",
+				Options:     []string{"nosuid", "noexec", "nodev"},
 			},
 			{
 				Destination: "/dev",

Original file line number	Diff line number	Diff line change
`@@ -167,6 +167,7 @@ func populateDefaultUnixSpec(ctx context.Context, s *Spec, id string) error {`
`167`	`167`	`Destination: "/proc",`
`168`	`168`	`Type: "proc",`
`169`	`169`	`Source: "proc",`
	`170`	`+ Options: []string{"nosuid", "noexec", "nodev"},`
`170`	`171`	`},`
`171`	`172`	`{`
`172`	`173`	`Destination: "/dev",`