160 lines
3.3 KiB
Go
160 lines
3.3 KiB
Go
|
package devices
|
||
|
|
|
||
|
|
var (
|
||
|
|
// These are devices that are to be both allowed and created.
|
||
|
|
|
||
|
|
DefaultSimpleDevices = []*Device{
|
||
|
|
// /dev/null and zero
|
||
|
|
{
|
||
|
|
Path: "/dev/null",
|
||
|
|
Type: 'c',
|
||
|
|
MajorNumber: 1,
|
||
|
|
MinorNumber: 3,
|
||
|
|
CgroupPermissions: "rwm",
|
||
|
|
FileMode: 0666,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
Path: "/dev/zero",
|
||
|
|
Type: 'c',
|
||
|
|
MajorNumber: 1,
|
||
|
|
MinorNumber: 5,
|
||
|
|
CgroupPermissions: "rwm",
|
||
|
|
FileMode: 0666,
|
||
|
|
},
|
||
|
|
|
||
|
|
{
|
||
|
|
Path: "/dev/full",
|
||
|
|
Type: 'c',
|
||
|
|
MajorNumber: 1,
|
||
|
|
MinorNumber: 7,
|
||
|
|
CgroupPermissions: "rwm",
|
||
|
|
FileMode: 0666,
|
||
|
|
},
|
||
|
|
|
||
|
|
// consoles and ttys
|
||
|
|
{
|
||
|
|
Path: "/dev/tty",
|
||
|
|
Type: 'c',
|
||
|
|
MajorNumber: 5,
|
||
|
|
MinorNumber: 0,
|
||
|
|
CgroupPermissions: "rwm",
|
||
|
|
FileMode: 0666,
|
||
|
|
},
|
||
|
|
|
||
|
|
// /dev/urandom,/dev/random
|
||
|
|
{
|
||
|
|
Path: "/dev/urandom",
|
||
|
|
Type: 'c',
|
||
|
|
MajorNumber: 1,
|
||
|
|
MinorNumber: 9,
|
||
|
|
CgroupPermissions: "rwm",
|
||
|
|
FileMode: 0666,
|
||
|
|
},
|
||
|
|
{
|
||
|
|
Path: "/dev/random",
|
||
|
|
Type: 'c',
|
||
|
|
MajorNumber: 1,
|
||
|
|
MinorNumber: 8,
|
||
|
|
CgroupPermissions: "rwm",
|
||
|
|
FileMode: 0666,
|
||
|
|
},
|
||
|
|
}
|
||
|
|
|
||
|
|
DefaultAllowedDevices = append([]*Device{
|
||
|
|
// allow mknod for any device
|
||
|
|
{
|
||
|
|
Type: 'c',
|
||
|
|
MajorNumber: Wildcard,
|
||
|
|
MinorNumber: Wildcard,
|
||
|
|
CgroupPermissions: "m",
|
||
|
|
},
|
||
|
|
{
|
||
|
|
Type: 'b',
|
||
|
|
MajorNumber: Wildcard,
|
||
|
|
MinorNumber: Wildcard,
|
||
|
|
CgroupPermissions: "m",
|
||
|
|
},
|
||
|
|
|
||
|
|
{
|
||
|
|
Path: "/dev/console",
|
||
|
|
Type: 'c',
|
||
|
|
MajorNumber: 5,
|
||
|
|
MinorNumber: 1,
|
||
|
|
CgroupPermissions: "rwm",
|
||
|
|
},
|
||
|
|
{
|
||
|
|
Path: "/dev/tty0",
|
||
|
|
Type: 'c',
|
||
|
|
MajorNumber: 4,
|
||
|
|
MinorNumber: 0,
|
||
|
|
CgroupPermissions: "rwm",
|
||
|
|
},
|
||
|
|
{
|
||
|
|
Path: "/dev/tty1",
|
||
|
|
Type: 'c',
|
||
|
|
MajorNumber: 4,
|
||
|
|
MinorNumber: 1,
|
||
|
|
CgroupPermissions: "rwm",
|
||
|
|
},
|
||
|
|
// /dev/pts/ - pts namespaces are "coming soon"
|
||
|
|
{
|
||
|
|
Path: "",
|
||
|
|
Type: 'c',
|
||
|
|
MajorNumber: 136,
|
||
|
|
MinorNumber: Wildcard,
|
||
|
|
CgroupPermissions: "rwm",
|
||
|
|
},
|
||
|
|
{
|
||
|
|
Path: "",
|
||
|
|
Type: 'c',
|
||
|
|
MajorNumber: 5,
|
||
|
|
MinorNumber: 2,
|
||
|
|
CgroupPermissions: "rwm",
|
||
|
|
},
|
||
|
|
|
||
|
|
// tuntap
|
||
|
|
{
|
||
|
|
Path: "",
|
||
|
|
Type: 'c',
|
||
|
|
MajorNumber: 10,
|
||
|
|
MinorNumber: 200,
|
||
|
|
CgroupPermissions: "rwm",
|
||
|
|
},
|
||
|
|
|
||
|
|
/*// fuse
|
||
|
|
{
|
||
|
|
Path: "",
|
||
|
|
Type: 'c',
|
||
|
|
MajorNumber: 10,
|
||
|
|
MinorNumber: 229,
|
||
|
|
CgroupPermissions: "rwm",
|
||
|
|
},
|
||
|
|
|
||
|
|
// rtc
|
||
|
|
{
|
||
|
|
Path: "",
|
||
|
|
Type: 'c',
|
||
|
|
MajorNumber: 254,
|
||
|
|
MinorNumber: 0,
|
||
|
|
CgroupPermissions: "rwm",
|
||
|
|
},
|
||
|
|
*/
|
||
|
|
}, DefaultSimpleDevices...)
|
||
|
|
|
||
|
|
DefaultAutoCreatedDevices = append([]*Device{
|
||
|
|
{
|
||
|
|
// /dev/fuse is created but not allowed.
|
||
|
|
// This is to allow java to work. Because java
|
||
|
|
// Insists on there being a /dev/fuse
|
||
|
|
// https://github.com/dotcloud/docker/issues/514
|
||
|
|
// https://github.com/dotcloud/docker/issues/2393
|
||
|
|
//
|
||
|
|
Path: "/dev/fuse",
|
||
|
|
Type: 'c',
|
||
|
|
MajorNumber: 10,
|
||
|
|
MinorNumber: 229,
|
||
|
|
CgroupPermissions: "rwm",
|
||
|
|
},
|
||
|
|
}, DefaultSimpleDevices...)
|
||
|
|
)
|