Kenfe-Mickael Laventure 24558a48dd Prevent mqueue from implicitely becoming a bind mount with --ipc=host ...

Currently, when running a container with --ipc=host, if /dev/mqueue is
a standard directory on the hos the daemon will bind mount it allowing
the container to create/modify files on the host.

This commit forces /dev/mqueue to always be of type mqueue except when
the user explicitely requested something to be bind mounted to
/dev/mqueue.

Signed-off-by: Kenfe-Mickael Laventure <mickael.laventure@gmail.com>
Upstream-commit: f7d4abdc00d521509995da1070215c808fe0fd9c
Component: engine

2016-02-09 14:16:08 -08:00

..

engine

Prevent mqueue from implicitely becoming a bind mount with --ipc=host

2016-02-09 14:16:08 -08:00