diff --git a/schema/config-linux.json b/schema/config-linux.json
index bde8e6c03..c0f649778 100644
--- a/schema/config-linux.json
+++ b/schema/config-linux.json
@@ -225,7 +225,7 @@
             },
             "rootfsPropagation": {
                 "id": "https://opencontainers.org/schema/bundle/linux/rootfsPropagation",
-                "type": "string"
+                "$ref": "defs-linux.json#/definitions/RootfsPropagation"
             },
             "seccomp": {
                 "id": "https://opencontainers.org/schema/bundle/linux/seccomp",
diff --git a/schema/defs-linux.json b/schema/defs-linux.json
index 6672d8c34..9e5466a0f 100644
--- a/schema/defs-linux.json
+++ b/schema/defs-linux.json
@@ -1,5 +1,14 @@
 {
     "definitions": {
+        "RootfsPropagation": {
+            "type": "string",
+            "enum": [
+                "private",
+                "shared",
+                "slave",
+                "unbindable"
+            ]
+        },
         "SeccompArch": {
             "type": "string",
             "enum": [