Antonio Murdaca 569b9702a5 Add /proc/acpi to masked paths ... The deafult OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current upstream master does not block /proc/acpi pathnames allowing attackers to modify host's hardware like enabling/disabling bluetooth or turning up/down keyboard brightness. SELinux prevents all of this if enabled. Signed-off-by: Antonio Murdaca <runcom@redhat.com>		2018-07-05 17:39:52 +02:00
..
defaults.go	Add /proc/acpi to masked paths	2018-07-05 17:39:52 +02:00
devices_linux.go	Various code-cleanup	2018-05-23 17:50:54 +02:00
devices_unsupported.go
namespaces.go	Various code-cleanup	2018-05-23 17:50:54 +02:00