summaryrefslogtreecommitdiff
path: root/pkg/specgen/generate/oci.go
diff options
context:
space:
mode:
authorOpenShift Merge Robot <openshift-merge-robot@users.noreply.github.com>2020-12-03 00:49:23 +0100
committerGitHub <noreply@github.com>2020-12-03 00:49:23 +0100
commit5cf7aa65fb4786ee3dad191a725f6c37fae83bc3 (patch)
tree4cb2423eadbf20e7e0ab613845c21940beacb122 /pkg/specgen/generate/oci.go
parent7984842d7e55baa8fc9498afa23b62113850feac (diff)
parent0334b6195820f7261f87a4f4e5d739a6d560f4b2 (diff)
downloadpodman-5cf7aa65fb4786ee3dad191a725f6c37fae83bc3.tar.gz
podman-5cf7aa65fb4786ee3dad191a725f6c37fae83bc3.tar.bz2
podman-5cf7aa65fb4786ee3dad191a725f6c37fae83bc3.zip
Merge pull request #8408 from umohnani8/sec-opt
Add mask and unmask option to --security-opt
Diffstat (limited to 'pkg/specgen/generate/oci.go')
-rw-r--r--pkg/specgen/generate/oci.go2
1 files changed, 1 insertions, 1 deletions
diff --git a/pkg/specgen/generate/oci.go b/pkg/specgen/generate/oci.go
index 8454458a8..0368ab205 100644
--- a/pkg/specgen/generate/oci.go
+++ b/pkg/specgen/generate/oci.go
@@ -298,7 +298,7 @@ func SpecGenToOCI(ctx context.Context, s *specgen.SpecGenerator, rt *libpod.Runt
}
}
- BlockAccessToKernelFilesystems(s.Privileged, s.PidNS.IsHost(), &g)
+ BlockAccessToKernelFilesystems(s.Privileged, s.PidNS.IsHost(), s.Mask, s.Unmask, &g)
for name, val := range s.Env {
g.AddProcessEnv(name, val)