runc/libcontainer/specconv
Aleksa Sarai 60e21ec26e
specconv: remove default /dev/console access
/dev/console is a host resouce which gives a bunch of permissions that
we really shouldn't be giving to containers, not to mention that
/dev/console in containers is actually /dev/pts/$n. Drop this since
arguably this is a fairly scary thing to allow...

Signed-off-by: Aleksa Sarai <asarai@suse.de>
2020-05-13 17:38:45 +10:00
..
example.go libcontainer: use consts of Namespace from runtime-spec 2020-04-19 23:21:40 +09:00
spec_linux.go specconv: remove default /dev/console access 2020-05-13 17:38:45 +10:00
spec_linux_test.go Honor spec.Process.NoNewPrivileges in specconv.CreateLibcontainerConfig 2020-05-11 13:38:14 -07:00