Mask /proc/keys to protect information leak about keys on host

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com> Closes: #1060 Approved by: mheon
2018-07-07 05:38:20 -04:00 · 2018-07-07 05:38:20 -04:00 · 5a8e5a2b17
parent 0660108e3e
commit 5a8e5a2b17
1 changed files with 1 additions and 0 deletions
--- a/pkg/spec/spec.go
+++ b/pkg/spec/spec.go
@ -287,6 +287,7 @@ func blockAccessToKernelFilesystems(config *CreateConfig, g *generate.Generator)
 		for _, mp := range []string{
 			"/proc/acpi",
 			"/proc/kcore",
+			"/proc/keys",
 			"/proc/latency_stats",
 			"/proc/timer_list",
 			"/proc/timer_stats",