summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorGiuseppe Scrivano <gscrivan@redhat.com>2019-04-11 15:52:36 +0200
committerGiuseppe Scrivano <gscrivan@redhat.com>2019-04-11 15:52:36 +0200
commit42eb9eaf294509e560dbf603f985c1dfdbc10f57 (patch)
treea36ec48f89d30ed0aa28d657bc794324384987e5
parentb7800889fbd0d411d15ba8d1ddab58d02fd105ae (diff)
downloadpodman-42eb9eaf294509e560dbf603f985c1dfdbc10f57.tar.gz
podman-42eb9eaf294509e560dbf603f985c1dfdbc10f57.tar.bz2
podman-42eb9eaf294509e560dbf603f985c1dfdbc10f57.zip
oci: add /sys/kernel to the masked paths
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
-rw-r--r--pkg/spec/spec.go1
1 files changed, 1 insertions, 0 deletions
diff --git a/pkg/spec/spec.go b/pkg/spec/spec.go
index 9b6bd089e..33c9fd6f3 100644
--- a/pkg/spec/spec.go
+++ b/pkg/spec/spec.go
@@ -500,6 +500,7 @@ func blockAccessToKernelFilesystems(config *CreateConfig, g *generate.Generator)
"/proc/scsi",
"/sys/firmware",
"/sys/fs/selinux",
+ "/sys/kernel",
} {
g.AddLinuxMaskedPaths(mp)
}