diff --git a/daemon/execdriver/native/create.go b/daemon/execdriver/native/create.go
index de6869ee85..a988fba529 100644
--- a/daemon/execdriver/native/create.go
+++ b/daemon/execdriver/native/create.go
@@ -43,6 +43,7 @@ func (d *driver) createContainer(c *execdriver.Command) (*configs.Config, error)
 			}
 		}
 		container.ReadonlyPaths = nil
+		container.MaskPaths = nil
 		if err := d.setPrivileged(container); err != nil {
 			return nil, err
 		}