Merge pull request #4820 from cyphar/1.2-proc-net-dev-overmount

kolyshkin · web-flow · commit 0220cf47aa93 · 2025-07-25T20:44:46.000-07:00
[1.2] rootfs: remove /proc/net/dev from allowed overmount list
diff --git a/libcontainer/rootfs_linux.go b/libcontainer/rootfs_linux.go
@@ -838,7 +838,6 @@ func checkProcMount(rootfs, dest string, m mountEntry) error {
 		"/proc/uptime",
 		"/proc/loadavg",
 		"/proc/slabinfo",
-		"/proc/net/dev",
 		"/proc/sys/kernel/ns_last_pid",
 		"/proc/sys/crypto/fips_enabled",
 	}

Original file line number	Diff line number	Diff line change
`@@ -838,7 +838,6 @@ func checkProcMount(rootfs, dest string, m mountEntry) error {`
`838`	`838`	`"/proc/uptime",`
`839`	`839`	`"/proc/loadavg",`
`840`	`840`	`"/proc/slabinfo",`
`841`		`- "/proc/net/dev",`
`842`	`841`	`"/proc/sys/kernel/ns_last_pid",`
`843`	`842`	`"/proc/sys/crypto/fips_enabled",`
`844`	`843`	`}`