merge #4817 into opencontainers/runc:main

cyphar · cyphar · commit 6bae6cad4759 · 2025-07-21T23:46:31.000+10:00
Aleksa Sarai (1):
  rootfs: remove /proc/net/dev from allowed overmount list

LGTMs: AkihiroSuda lifubang
diff --git a/libcontainer/rootfs_linux.go b/libcontainer/rootfs_linux.go
@@ -840,7 +840,6 @@ func checkProcMount(rootfs, dest string, m mountEntry) error {
 		"/proc/uptime",
 		"/proc/loadavg",
 		"/proc/slabinfo",
-		"/proc/net/dev",
 		"/proc/sys/kernel/ns_last_pid",
 		"/proc/sys/crypto/fips_enabled",
 	}

Original file line number	Diff line number	Diff line change
`@@ -840,7 +840,6 @@ func checkProcMount(rootfs, dest string, m mountEntry) error {`
`840`	`840`	`"/proc/uptime",`
`841`	`841`	`"/proc/loadavg",`
`842`	`842`	`"/proc/slabinfo",`
`843`		`- "/proc/net/dev",`
`844`	`843`	`"/proc/sys/kernel/ns_last_pid",`
`845`	`844`	`"/proc/sys/crypto/fips_enabled",`
`846`	`845`	`}`