Revert "Mount proc with the hidepid=2 option"

We were implicitly using proc:mixed to mount /proc/sys as read-only.
Without the automount the whole /proc was mounted as read-write which
we want to avoid.

I'm unable to replicate the proc:mixed logic with lxc.mount.entry
so revert this change until a solution is found.

This reverts commit f5543df68651277042b156f19f5b3804c297f2a7.
Fixes: #642

diff --git a/data/configs/config_base b/data/configs/config_base
index f36a7a93758299b9fb5cff267acdba587affd9ea..27e070fba4dce87e46d37cce1d0ceed021c960b4 100644 (file)
--- a/data/configs/config_base
+++ b/data/configs/config_base
@@ -7,8 +7,7 @@ lxc.autodev = 0
 
 lxc.cap.keep = audit_control sys_nice wake_alarm setpcap setgid setuid sys_ptrace sys_admin wake_alarm block_suspend sys_time net_admin net_raw net_bind_service kill dac_override dac_read_search fsetid mknod syslog chown sys_resource fowner ipc_lock sys_chroot
 
-lxc.mount.auto = cgroup:ro sys:ro 
-lxc.mount.entry = proc proc proc nodev,nosuid,noexec,hidepid=2 0 0
+lxc.mount.auto = cgroup:ro sys:ro proc
 
 lxc.console.path = none