pool/docker
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 539487 from home:cyphar:containers:docker_CVE-2017-16539

Browse Source 
Update bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch.

OBS-URL: https://build.opensuse.org/request/show/539487
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/docker?expand=0&rev=211
This commit is contained in:
Aleksa Sarai 2017-11-07 10:53:24 +00:00 committed by Git OBS Bridge
parent 9102c78185
commit 2c5d57165f
1 changed files with 5 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch
View File

@ -1,4 +1,4 @@
From 48dad93f2bfc6ac5a201e98d6029fcff9cfbba80 Mon Sep 17 00:00:00 2001 From d0194d04255e8121d67c1f55d7dce8f5ba67fccc Mon Sep 17 00:00:00 2001
From: Aleksa Sarai <asarai@suse.de> From: Aleksa Sarai <asarai@suse.de>
Date: Tue, 7 Nov 2017 18:32:41 +1100 Date: Tue, 7 Nov 2017 18:32:41 +1100
Subject: [PATCH] oci: add /proc/scsi to masked paths Subject: [PATCH] oci: add /proc/scsi to masked paths
@ -11,18 +11,17 @@ SUSE-Bug: https://bugzilla.suse.com/show_bug.cgi?id=1066801
Signed-off-by: Justin Cormack <justin.cormack@docker.com> Signed-off-by: Justin Cormack <justin.cormack@docker.com>
Signed-off-by: Aleksa Sarai <asarai@suse.de> Signed-off-by: Aleksa Sarai <asarai@suse.de>
--- ---
oci/defaults.go | 2 ++ oci/defaults.go | 1 +
1 file changed, 2 insertions(+) 1 file changed, 1 insertion(+)
diff --git a/oci/defaults.go b/oci/defaults.go diff --git a/oci/defaults.go b/oci/defaults.go
index d706fafcc021..188ec3149659 100644 index d706fafcc021..a7fd285060c2 100644
--- a/oci/defaults.go --- a/oci/defaults.go
+++ b/oci/defaults.go +++ b/oci/defaults.go
@@ -132,6 +132,8 @@ func DefaultLinuxSpec() specs.Spec { @@ -132,6 +132,7 @@ func DefaultLinuxSpec() specs.Spec {
"/proc/timer_list", "/proc/timer_list",
"/proc/timer_stats", "/proc/timer_stats",
"/proc/sched_debug", "/proc/sched_debug",
+ "/sys/firmware",
+ "/proc/scsi", + "/proc/scsi",
}, },
ReadonlyPaths: []string{ ReadonlyPaths: []string{