From ba935a51a6a5caafe1d969ec97ff3633a1eca61b Mon Sep 17 00:00:00 2001 From: Akihiro Suda Date: Fri, 12 Nov 2021 18:35:47 +0900 Subject: [PATCH] Support nosymfollow mount option (kernel 5.10) See MS_NOSYMFOLLOW in mount(2) https://man7.org/linux/man-pages/man2/mount.2.html Signed-off-by: Akihiro Suda --- libcontainer/specconv/spec_linux.go | 2 ++ 1 file changed, 2 insertions(+) diff --git a/libcontainer/specconv/spec_linux.go b/libcontainer/specconv/spec_linux.go index cc743d043..2cbc67991 100644 --- a/libcontainer/specconv/spec_linux.go +++ b/libcontainer/specconv/spec_linux.go @@ -87,6 +87,7 @@ func initMaps() { "norelatime": {true, unix.MS_RELATIME}, "nostrictatime": {true, unix.MS_STRICTATIME}, "nosuid": {false, unix.MS_NOSUID}, + "nosymfollow": {false, unix.MS_NOSYMFOLLOW}, // since kernel 5.10 "rbind": {false, unix.MS_BIND | unix.MS_REC}, "relatime": {false, unix.MS_RELATIME}, "remount": {false, unix.MS_REMOUNT}, @@ -96,6 +97,7 @@ func initMaps() { "strictatime": {false, unix.MS_STRICTATIME}, "suid": {true, unix.MS_NOSUID}, "sync": {false, unix.MS_SYNCHRONOUS}, + "symfollow": {true, unix.MS_NOSYMFOLLOW}, // since kernel 5.10 } extensionFlags = map[string]struct { clear bool