From 06ed42eb42c8f3f4b3464b7901912efce6a8fc2d Mon Sep 17 00:00:00 2001 From: criyle Date: Sun, 19 Sep 2021 13:35:11 -0700 Subject: [PATCH] mount: add recursive flag to bind mounts --- pkg/mount/builder_linux.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkg/mount/builder_linux.go b/pkg/mount/builder_linux.go index 82528a4..92cfa51 100644 --- a/pkg/mount/builder_linux.go +++ b/pkg/mount/builder_linux.go @@ -8,7 +8,7 @@ import ( ) const ( - bind = unix.MS_BIND | unix.MS_NOSUID | unix.MS_PRIVATE + bind = unix.MS_BIND | unix.MS_NOSUID | unix.MS_PRIVATE | unix.MS_REC mFlag = unix.MS_NOSUID | unix.MS_NOATIME | unix.MS_NODEV ) @@ -110,7 +110,7 @@ func (b *Builder) WithProc() *Builder { Source: "proc", Target: "proc", FsType: "proc", - Flags: unix.MS_NOSUID | unix.MS_RDONLY, + Flags: unix.MS_NOSUID | unix.MS_NODEV | unix.MS_NOATIME | unix.MS_NOEXEC | unix.MS_RDONLY, }) return b }