Merge pull request #27314 from AkihiroSuda/mask-sys-firmware-2

oci/defaults_linux.go: mask /sys/firmware

oci/defaults_linux.go

@@ -83,6 +83,7 @@ func DefaultSpec() specs.Spec {
 			"/proc/timer_list",
 			"/proc/timer_stats",
 			"/proc/sched_debug",
+			"/sys/firmware",
 		},
 		ReadonlyPaths: []string{
 			"/proc/asound",