Kenfe-Mickael Laventure 24558a48dd Prevent mqueue from implicitely becoming a bind mount with --ipc=host ...

Currently, when running a container with --ipc=host, if /dev/mqueue is
a standard directory on the hos the daemon will bind mount it allowing
the container to create/modify files on the host.

This commit forces /dev/mqueue to always be of type mqueue except when
the user explicitely requested something to be bind mounted to
/dev/mqueue.

Signed-off-by: Kenfe-Mickael Laventure <mickael.laventure@gmail.com>
Upstream-commit: f7d4abdc00d521509995da1070215c808fe0fd9c
Component: engine

2016-02-09 14:16:08 -08:00

components/engine

Prevent mqueue from implicitely becoming a bind mount with --ipc=host

2016-02-09 14:16:08 -08:00

Description

No description provided

310 MiB

Languages

Go 92%

Shell 5.5%

Dockerfile 1.1%

Go-Checksums 0.9%

Makefile 0.3%

Other 0.2%