New mounts of /proc or /sys in usernamespaces are blocked unless unmasked
Issue
- After updating to RHEL 7.5 the kernel blocks any new mounts of
/procor/syswithin an unprivelaged Docker container with usernamespaces enabled.
Environment
- Red Hat Enterprise Linux 7.5+
- Docker
- namespace.unpriv_enable=1
- kernel-3.10.0-862.6.3.el7
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
