Mount /dev in system container
"soft": 1024
}
],
- "noNewPrivileges": true
+ "noNewPrivileges": false
},
"root": {
"path": "rootfs",
"mounts": [
{
"destination": "/dev",
- "type": "tmpfs",
- "source": "tmpfs",
+ "type": "bind",
+ "source": "/dev",
"options": [
- "nosuid",
- "strictatime",
- "mode=755",
- "size=65536k"
+ "rbind",
+ "rslave"
]
},
{
"size=65536k"
]
},
- {
- "destination": "/dev/mqueue",
- "type": "mqueue",
- "source": "mqueue",
- "options": [
- "nosuid",
- "noexec",
- "nodev"
- ]
- },
{
"destination": "/proc",
"type": "proc",
{
"allow": false,
"access": "rwm"
+ },
+ {
+ "allow": true,
+ "type": "b",
+ "access": "rwm"
}
]
},
