Add /proc/keys to masked paths
This leaks information about keyrings on the host. Keyrings are not namespaced. Signed-off-by: Justin Cormack <justin.cormack@docker.com>
This commit is contained in:
parent
0076343b29
commit
de23cb9398
1 changed files with 1 additions and 0 deletions
|
@ -115,6 +115,7 @@ func DefaultLinuxSpec() specs.Spec {
|
|||
s.Linux = &specs.Linux{
|
||||
MaskedPaths: []string{
|
||||
"/proc/kcore",
|
||||
"/proc/keys",
|
||||
"/proc/latency_stats",
|
||||
"/proc/timer_list",
|
||||
"/proc/timer_stats",
|
||||
|
|
Loading…
Reference in a new issue