forked from Lainports/freebsd-ports
094c6d2e9f
This also adds a fix for https://github.com/containers/podman/issues/21117 which will be submitted upstream soon (credit to Ben Cooksley from KDE for that one).
11 lines
504 B
Go
11 lines
504 B
Go
--- libpod/container_inspect.go.orig 2024-01-07 16:19:52 UTC
|
|
+++ libpod/container_inspect.go
|
|
@@ -316,7 +316,7 @@ func (c *Container) GetSecurityOptions() []string {
|
|
if apparmor, ok := ctrSpec.Annotations[define.InspectAnnotationApparmor]; ok {
|
|
SecurityOpt = append(SecurityOpt, fmt.Sprintf("apparmor=%s", apparmor))
|
|
}
|
|
- if c.config.Spec.Linux.MaskedPaths == nil {
|
|
+ if c.config.Spec.Linux != nil && c.config.Spec.Linux.MaskedPaths == nil {
|
|
SecurityOpt = append(SecurityOpt, "unmask=all")
|
|
}
|
|
|