diff options
author | gVisor bot <gvisor-bot@google.com> | 2019-06-25 04:52:36 +0000 |
---|---|---|
committer | gVisor bot <gvisor-bot@google.com> | 2019-06-25 04:52:36 +0000 |
commit | 97b3e461d427c10537f58755bc1b307a5548b092 (patch) | |
tree | b0eb6a83a9a4ab9f614aa73100758edf1467a370 /runsc/cmd | |
parent | fa64387eb7da8f6f44e2979b8a98ae8a4403bf15 (diff) | |
parent | fd16a329ce0c9fa1e7dd4c0fc1edc201f4c19571 (diff) |
Merge fd16a329 (automated)
Diffstat (limited to 'runsc/cmd')
-rw-r--r-- | runsc/cmd/gofer.go | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/runsc/cmd/gofer.go b/runsc/cmd/gofer.go index 52609a57a..9faabf494 100644 --- a/runsc/cmd/gofer.go +++ b/runsc/cmd/gofer.go @@ -152,6 +152,10 @@ func (g *Gofer) Execute(_ context.Context, f *flag.FlagSet, args ...interface{}) // modes exactly as sent by the sandbox, which will have applied its own umask. syscall.Umask(0) + if err := fsgofer.OpenProcSelfFD(); err != nil { + Fatalf("failed to open /proc/self/fd: %v", err) + } + if err := syscall.Chroot(root); err != nil { Fatalf("failed to chroot to %q: %v", root, err) } |