Merge pull request cri-o#1173 from runcom/fix-cve

Mrunal Patel · web-flow · commit 7508cdeace8d · 2017-11-22T05:35:33.000-10:00
Add /proc/scsi to masked paths
diff --git a/server/container_create.go b/server/container_create.go
@@ -889,6 +889,7 @@ func (s *Server) createSandboxContainer(ctx context.Context, containerID string,
 				"/proc/timer_list",
 				"/proc/timer_stats",
 				"/proc/sched_debug",
+				"/proc/scsi",
 				"/sys/firmware",
 			} {
 				specgen.AddLinuxMaskedPaths(mp)
