libcontainer/specconv/spec_linux: Add support for (no)acl

Part of catching runC up with the spec, which punts valid options to
mount(8) [1,2].  This is a filesystem-specific entry in mount(8), but
it's represented by a MS_* flag in mount(2) so we need an entry in the
translation table.

[1]: https://github.com/opencontainers/runtime-spec/blame/v1.0.0-rc5/config.md#L68
[2]: opencontainers/runtime-spec#771

Signed-off-by: W. Trevor King <[email protected]>

Author: wking

libcontainer/specconv/spec_linux.go

@@ -639,6 +639,7 @@ func parseMountOptions(options []string) (int, []int, string, int) {
 		clear bool
 		flag  int
 	}{
+		"acl":           {false, unix.MS_POSIXACL},
 		"async":         {true, unix.MS_SYNCHRONOUS},
 		"atime":         {true, unix.MS_NOATIME},
 		"bind":          {false, unix.MS_BIND},
@@ -648,6 +649,7 @@ func parseMountOptions(options []string) (int, []int, string, int) {
 		"dirsync":       {false, unix.MS_DIRSYNC},
 		"exec":          {true, unix.MS_NOEXEC},
 		"mand":          {false, unix.MS_MANDLOCK},
+		"noacl":         {true, unix.MS_POSIXACL},
 		"noatime":       {false, unix.MS_NOATIME},
 		"nodev":         {false, unix.MS_NODEV},
 		"nodiratime":    {false, unix.MS_NODIRATIME},