Merge pull request #4345 from giuseppe/mask-release_agent

systemd: mask /sys/fs/cgroup/systemd/release_agent
2019-10-26 10:32:02 +02:00 · 2019-10-26 10:32:02 +02:00 · ea46937675
parent a01cb220c8 0d5d6dab57
commit ea46937675
1 changed files with 1 additions and 0 deletions
--- a/libpod/container_internal_linux.go
+++ b/libpod/container_internal_linux.go
@ -550,6 +550,7 @@ func (c *Container) setupSystemd(mounts []spec.Mount, g generate.Generator) erro
 			Options:     []string{"bind", "nodev", "noexec", "nosuid"},
 		}
 		g.AddMount(systemdMnt)
+		g.AddLinuxMaskedPaths("/sys/fs/cgroup/systemd/release_agent")
 	}

 	return nil