From 27915db3846690bf3102df9df47b1f966706011d Mon Sep 17 00:00:00 2001
From: Davanum Srinivas <davanum@gmail.com>
Date: Thu, 11 Aug 2016 15:03:47 -0400
Subject: [PATCH] Adding /proc/timer_list to the masked paths list

/proc/timer_list seems to leak information about the host. Here is
an example from a busybox container running on docker+kubernetes.

 # cat /proc/timer_list | grep -i -e kube
 <ffff8800b8cc3db0>, hrtimer_wakeup, S:01, futex_wait_queue_me, kubelet/2497
 <ffff880129ac3db0>, hrtimer_wakeup, S:01, futex_wait_queue_me, kube-proxy/3478
 <ffff8800b1b77db0>, hrtimer_wakeup, S:01, futex_wait_queue_me, kube-proxy/3470
 <ffff8800bb6abdb0>, hrtimer_wakeup, S:01, futex_wait_queue_me, kubelet/2499

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
---
 spec.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/spec.go b/spec.go
index 59e47bd10..67d502b67 100644
--- a/spec.go
+++ b/spec.go
@@ -149,6 +149,7 @@ container on your host.`,
 				MaskedPaths: []string{
 					"/proc/kcore",
 					"/proc/latency_stats",
+					"/proc/timer_list",
 					"/proc/timer_stats",
 					"/proc/sched_debug",
 				},