summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorOpenShift Merge Robot <openshift-merge-robot@users.noreply.github.com>2019-10-26 10:32:02 +0200
committerGitHub <noreply@github.com>2019-10-26 10:32:02 +0200
commitea46937675bbb5839a4f2fdf894d480b57744aeb (patch)
tree1ea299ce4051562eb8530a5b7b1f6971af20872c
parenta01cb220c8389adaeaa8fb2b4c4fbd65e77c0529 (diff)
parent0d5d6dab57590f9f52666031c1979f4cf136d12e (diff)
downloadpodman-ea46937675bbb5839a4f2fdf894d480b57744aeb.tar.gz
podman-ea46937675bbb5839a4f2fdf894d480b57744aeb.tar.bz2
podman-ea46937675bbb5839a4f2fdf894d480b57744aeb.zip
Merge pull request #4345 from giuseppe/mask-release_agent
systemd: mask /sys/fs/cgroup/systemd/release_agent
-rw-r--r--libpod/container_internal_linux.go1
1 files changed, 1 insertions, 0 deletions
diff --git a/libpod/container_internal_linux.go b/libpod/container_internal_linux.go
index b7d353327..283d38a0f 100644
--- a/libpod/container_internal_linux.go
+++ b/libpod/container_internal_linux.go
@@ -550,6 +550,7 @@ func (c *Container) setupSystemd(mounts []spec.Mount, g generate.Generator) erro
Options: []string{"bind", "nodev", "noexec", "nosuid"},
}
g.AddMount(systemdMnt)
+ g.AddLinuxMaskedPaths("/sys/fs/cgroup/systemd/release_agent")
}
return nil