Add nosuid,noexec,nodev to proc
This is to match the same mount options as the host.
@@ -167,6 +167,7 @@ func populateDefaultUnixSpec(ctx context.Context, s *Spec, id string) error {
Destination: "/proc",
Type: "proc",
Source: "proc",
+ Options: []string{"nosuid", "noexec", "nodev"},
},
{
Destination: "/dev",
