From: Азалия Смарагдова <charming.flurry@yandex.ru>
Date: Tue, 11 Oct 2022 14:35:25 +0000 (+0500)
Subject: Mount proc with the hidepid=2 option
X-Git-Tag: 1.3.4~25
X-Git-Url: https://glassweightruler.freedombox.rocks/gitweb/waydroid.git/commitdiff_plain/f5543df68651277042b156f19f5b3804c297f2a7

Mount proc with the hidepid=2 option
---

diff --git a/data/configs/config_base b/data/configs/config_base
index f996bb4..16b4ced 100644
--- a/data/configs/config_base
+++ b/data/configs/config_base
@@ -7,7 +7,8 @@ lxc.autodev = 0
 
 lxc.cap.keep = audit_control sys_nice wake_alarm setpcap setgid setuid sys_ptrace sys_admin wake_alarm block_suspend sys_time net_admin net_raw net_bind_service kill dac_override dac_read_search fsetid mknod syslog chown sys_resource fowner ipc_lock sys_chroot
 
-lxc.mount.auto = cgroup:ro sys:ro proc
+lxc.mount.auto = cgroup:ro sys:ro 
+lxc.mount.entry = proc proc proc nodev,nosuid,noexec,hidepid=2 0 0
 
 lxc.console.path = none
 lxc.pty.max = 10