maskedPaths: Add /sys/devices/virtual/tpm

Add /sys/devices/virtual/tpm to the mask paths to avoid isolation
issues via sysfs for TPM 1.2

Signed-off-by: Stefan Berger <[email protected]>

Author: stefanberger

libcontainer/specconv/example.go

@@ -121,6 +121,7 @@ func Example() *specs.Spec {
 				"/proc/sched_debug",
 				"/sys/firmware",
 				"/proc/scsi",
+				"/sys/devices/virtual/tpm",
 			},
 			ReadonlyPaths: []string{
 				"/proc/bus",