(f *os.File)
| 1313 | } |
| 1314 | |
| 1315 | func verifyDevNull(f *os.File) error { |
| 1316 | return sys.VerifyInode(f, func(st *unix.Stat_t, _ *unix.Statfs_t) error { |
| 1317 | if !isDevNull(st) { |
| 1318 | return errors.New("container's /dev/null is invalid") |
| 1319 | } |
| 1320 | return nil |
| 1321 | }) |
| 1322 | } |
| 1323 | |
| 1324 | // maskDir mounts a read-only tmpfs on top of the specified path. |
| 1325 | func maskDir(path, mountLabel string) error { |
no test coverage detected
searching dependent graphs…