maskedPaths: Add /sys/devices/virtual/tpm

Add /sys/devices/virtual/tpm to the mask paths to avoid isolation issues via sysfs for TPM 1.2 Signed-off-by: Stefan Berger <[email protected]>
opencontainers · Jul 6, 2020 · 209338c · 209338c
1 parent 7279c3e
commit 209338c
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/libcontainer/specconv/example.go b/libcontainer/specconv/example.go
@@ -121,6 +121,7 @@ func Example() *specs.Spec {
 				"/proc/sched_debug",
 				"/sys/firmware",
 				"/proc/scsi",
+				"/sys/devices/virtual/tpm",
 			},
 			ReadonlyPaths: []string{
 				"/proc/bus",