diff options
| author | Giuseppe Scrivano <gscrivan@redhat.com> | 2018-08-22 17:45:44 +0200 |
|---|---|---|
| committer | Atomic Bot <atomic-devel@projectatomic.io> | 2018-08-27 13:26:28 +0000 |
| commit | 663ee91eec01706008046c1df2c307716f9288db (patch) | |
| tree | f789c4e681e51c74a29b9c71df8db73806f7f751 /pkg/spec/createconfig.go | |
| parent | 90e93e66b0906e59efe3025d801a0e122bd4c42e (diff) | |
| download | podman-663ee91eec01706008046c1df2c307716f9288db.tar.gz podman-663ee91eec01706008046c1df2c307716f9288db.tar.bz2 podman-663ee91eec01706008046c1df2c307716f9288db.zip | |
Fix Mount Propagation
Default mount propagation inside of containes should be private
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
Closes: #1305
Approved by: mheon
Diffstat (limited to 'pkg/spec/createconfig.go')
| -rw-r--r-- | pkg/spec/createconfig.go | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/pkg/spec/createconfig.go b/pkg/spec/createconfig.go index 41030bf26..c7eaeb9f7 100644 --- a/pkg/spec/createconfig.go +++ b/pkg/spec/createconfig.go @@ -214,7 +214,7 @@ func (c *CreateConfig) GetVolumeMounts(specMounts []spec.Mount) ([]spec.Mount, e Destination: vol, Type: string(TypeTmpfs), Source: string(TypeTmpfs), - Options: []string{"rw", "noexec", "nosuid", "nodev", "tmpcopyup"}, + Options: []string{"private", "rw", "noexec", "nosuid", "nodev", "tmpcopyup"}, } m = append(m, mount) } @@ -272,7 +272,7 @@ func (c *CreateConfig) GetTmpfsMounts() []spec.Mount { var m []spec.Mount for _, i := range c.Tmpfs { // Default options if nothing passed - options := []string{"rw", "noexec", "nosuid", "nodev", "size=65536k"} + options := []string{"private", "rw", "noexec", "nosuid", "nodev", "size=65536k"} spliti := strings.Split(i, ":") destPath := spliti[0] if len(spliti) > 1 { |