1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2022-11-09 12:21:53 -05:00

Add /proc/scsi to masked paths

This is writeable, and can be used to remove devices. Containers do
not need to know about scsi devices.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
This commit is contained in:
Justin Cormack 2017-11-03 15:12:22 +00:00
parent 7801be2eee
commit a21ecdf3c8

View file

@ -119,6 +119,7 @@ func DefaultLinuxSpec() specs.Spec {
"/proc/timer_list", "/proc/timer_list",
"/proc/timer_stats", "/proc/timer_stats",
"/proc/sched_debug", "/proc/sched_debug",
"/proc/scsi",
}, },
ReadonlyPaths: []string{ ReadonlyPaths: []string{
"/proc/asound", "/proc/asound",