From 2c5d57165f2668e9b8d70504ecc0eb11fb4982c6e57c8728f2f7e0cfa3ab71fd Mon Sep 17 00:00:00 2001 From: Aleksa Sarai Date: Tue, 7 Nov 2017 10:53:24 +0000 Subject: [PATCH] Accepting request 539487 from home:cyphar:containers:docker_CVE-2017-16539 Update bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch. OBS-URL: https://build.opensuse.org/request/show/539487 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=211 --- ...66801-0001-oci-add-proc-scsi-to-masked-paths.patch | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) diff --git a/bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch b/bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch index 3e19a3c..315cd5b 100644 --- a/bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch +++ b/bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch @@ -1,4 +1,4 @@ -From 48dad93f2bfc6ac5a201e98d6029fcff9cfbba80 Mon Sep 17 00:00:00 2001 +From d0194d04255e8121d67c1f55d7dce8f5ba67fccc Mon Sep 17 00:00:00 2001 From: Aleksa Sarai Date: Tue, 7 Nov 2017 18:32:41 +1100 Subject: [PATCH] oci: add /proc/scsi to masked paths @@ -11,18 +11,17 @@ SUSE-Bug: https://bugzilla.suse.com/show_bug.cgi?id=1066801 Signed-off-by: Justin Cormack Signed-off-by: Aleksa Sarai --- - oci/defaults.go | 2 ++ - 1 file changed, 2 insertions(+) + oci/defaults.go | 1 + + 1 file changed, 1 insertion(+) diff --git a/oci/defaults.go b/oci/defaults.go -index d706fafcc021..188ec3149659 100644 +index d706fafcc021..a7fd285060c2 100644 --- a/oci/defaults.go +++ b/oci/defaults.go -@@ -132,6 +132,8 @@ func DefaultLinuxSpec() specs.Spec { +@@ -132,6 +132,7 @@ func DefaultLinuxSpec() specs.Spec { "/proc/timer_list", "/proc/timer_stats", "/proc/sched_debug", -+ "/sys/firmware", + "/proc/scsi", }, ReadonlyPaths: []string{