bind /dev/console operation not permitted

[fengwei0328]

mount initializes the console was executed before pivotRoot in the old version
now, pivotRoot is before.
so, when I bind /dev like this:

{
            "destination": "/dev",
            "type": "bind",
            "source": "/dev",
            "options": [
                "rbind",
                "rprivate",
                "rw"
            ]
        },

with:

"linux": {
        "resources": {
            "devices": [
                {
                    "allow": false,
                    "access": "rwm"
                }
            ]
        },

An error will be reported:

ERRO[0000] runc run failed: unable to start container process: error during container init: open /dev/console: operation not permitted 

Older versions don't have such error, also can set devices.allow as true.

[cyphar]

What is the "old version" you're talking about?

[fengwei0328]

runc 1.0-rc90
without linux.resources.devices.allow=true
No error will be reported

[fengwei0328]

What is the "old version" you're talking about?

Thanks a lot.
I find the GHSA-g54h-m393-cpwq