Block use of /proc/acpi from inside containers
Closes:
Approved by: mheon
@@ -285,6 +285,7 @@ func CreateConfigToOCISpec(config *CreateConfig) (*spec.Spec, error) { //nolint
func blockAccessToKernelFilesystems(config *CreateConfig, g *generate.Generator) {
if !config.Privileged {
for _, mp := range []string{
+ "/proc/acpi",
"/proc/kcore",
"/proc/latency_stats",
"/proc/timer_list",
