Add /proc/keys to masked paths
This leaks information about keyrings on the host. Keyrings are
not namespaced.
@@ -155,6 +155,7 @@ func createDefaultSpec(ctx context.Context, id string) (*Spec, error) {
MaskedPaths: []string{
"/proc/acpi",
"/proc/kcore",
+ "/proc/keys",
"/proc/latency_stats",
"/proc/timer_list",
"/proc/timer_stats",
