Support nosymfollow mount option (kernel 5.10)

See MS_NOSYMFOLLOW in mount(2) https://man7.org/linux/man-pages/man2/mount.2.html Signed-off-by: Akihiro Suda <[email protected]>
opencontainers · Nov 18, 2021 · 9549d81 · 9549d81
1 parent 7017f27
commit 9549d81
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/libcontainer/specconv/spec_linux.go b/libcontainer/specconv/spec_linux.go
@@ -86,6 +86,7 @@ func initMaps() {
 			"norelatime":    {true, unix.MS_RELATIME},
 			"nostrictatime": {true, unix.MS_STRICTATIME},
 			"nosuid":        {false, unix.MS_NOSUID},
+			"nosymfollow":   {false, unix.MS_NOSYMFOLLOW}, // since kernel 5.10
 			"rbind":         {false, unix.MS_BIND | unix.MS_REC},
 			"relatime":      {false, unix.MS_RELATIME},
 			"remount":       {false, unix.MS_REMOUNT},
@@ -95,6 +96,7 @@ func initMaps() {
 			"strictatime":   {false, unix.MS_STRICTATIME},
 			"suid":          {true, unix.MS_NOSUID},
 			"sync":          {false, unix.MS_SYNCHRONOUS},
+			"symfollow":     {true, unix.MS_NOSYMFOLLOW}, // since kernel 5.10
 		}
 		extensionFlags = map[string]struct {
 			clear bool