Merge pull request #20333 from rhatdan/mqueue
/dev/mqueue should never be mounted readonly Upstream-commit: be5939f40778d8056edff621153391e322f149d5 Component: engine
This commit is contained in:
@@ -104,7 +104,7 @@ func (d *Driver) createContainer(c *execdriver.Command, hooks execdriver.Hooks)
|
||||
if container.Readonlyfs {
|
||||
for i := range container.Mounts {
|
||||
switch container.Mounts[i].Destination {
|
||||
case "/proc", "/dev", "/dev/pts":
|
||||
case "/proc", "/dev", "/dev/pts", "/dev/mqueue":
|
||||
continue
|
||||
}
|
||||
container.Mounts[i].Flags |= syscall.MS_RDONLY
|
||||
|
||||
Reference in New Issue
Block a user