Merge pull request #1175 from runcom/fix-cve-1.0
[release-1.0] Add /proc/scsi to masked paths
This commit is contained in:
commit
3078f59068
2 changed files with 2 additions and 1 deletions
|
@ -788,6 +788,7 @@ func (s *Server) createSandboxContainer(ctx context.Context, containerID string,
|
||||||
"/proc/timer_list",
|
"/proc/timer_list",
|
||||||
"/proc/timer_stats",
|
"/proc/timer_stats",
|
||||||
"/proc/sched_debug",
|
"/proc/sched_debug",
|
||||||
|
"/proc/scsi",
|
||||||
"/sys/firmware",
|
"/sys/firmware",
|
||||||
} {
|
} {
|
||||||
specgen.AddLinuxMaskedPaths(mp)
|
specgen.AddLinuxMaskedPaths(mp)
|
||||||
|
|
|
@ -1,4 +1,4 @@
|
||||||
package version
|
package version
|
||||||
|
|
||||||
// Version is the version of the build.
|
// Version is the version of the build.
|
||||||
const Version = "1.0.5-dev"
|
const Version = "1.0.6-dev"
|
||||||
|
|
Loading…
Reference in a new issue