Merge pull request #238 from rhvgoyal/secrets-rprivate

Make secret mount rprivate by default
projectatomic · Apr 29, 2017 · 92b10e4 · 92b10e4
2 parents c14458a + 9bdb599
commit 92b10e4
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/container/container_unix.go b/container/container_unix.go
@@ -457,5 +457,6 @@ func (container *Container) SecretMount(rootUID, rootGID int) (*Mount, error) {
 	m.Source = secretsPath
 	m.Destination = "/run/secrets"
 	m.Writable = true
+	m.Propagation = "rprivate"
 	return m, nil
 }