diff options
| author | Giuseppe Scrivano <gscrivan@redhat.com> | 2018-08-22 17:45:44 +0200 |
|---|---|---|
| committer | Atomic Bot <atomic-devel@projectatomic.io> | 2018-08-27 13:26:28 +0000 |
| commit | 663ee91eec01706008046c1df2c307716f9288db (patch) | |
| tree | f789c4e681e51c74a29b9c71df8db73806f7f751 /pkg/secrets/secrets.go | |
| parent | 90e93e66b0906e59efe3025d801a0e122bd4c42e (diff) | |
| download | podman-663ee91eec01706008046c1df2c307716f9288db.tar.gz podman-663ee91eec01706008046c1df2c307716f9288db.tar.bz2 podman-663ee91eec01706008046c1df2c307716f9288db.zip | |
Fix Mount Propagation
Default mount propagation inside of containes should be private
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
Closes: #1305
Approved by: mheon
Diffstat (limited to 'pkg/secrets/secrets.go')
| -rw-r--r-- | pkg/secrets/secrets.go | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/pkg/secrets/secrets.go b/pkg/secrets/secrets.go index 6f38f1fd5..be5642eba 100644 --- a/pkg/secrets/secrets.go +++ b/pkg/secrets/secrets.go @@ -243,7 +243,7 @@ func addSecretsFromMountsFile(filePath, mountLabel, containerWorkingDir, mountPr Source: filepath.Join(mountPrefix, ctrDir), Destination: ctrDir, Type: "bind", - Options: []string{"bind"}, + Options: []string{"bind", "private"}, } mounts = append(mounts, m) @@ -278,7 +278,7 @@ func addFIPSModeSecret(mounts *[]rspec.Mount, containerWorkingDir string) error Source: ctrDirOnHost, Destination: secretsDir, Type: "bind", - Options: []string{"bind"}, + Options: []string{"bind", "private"}, } *mounts = append(*mounts, m) } |