Fix /proc/kcore mount of /dev/null

Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael)
docker-archive · May 1, 2014 · 3720dca · 3720dca
1 parent ab60f78
commit 3720dca
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/security/restrict/restrict.go b/security/restrict/restrict.go
@@ -20,8 +20,7 @@ func Restrict() error {
 			return fmt.Errorf("unable to remount %s readonly: %s", dest, err)
 		}
 	}
-
-	if err := system.Mount("/proc/kcore", "/dev/null", "", syscall.MS_BIND, ""); err != nil {
+	if err := system.Mount("/dev/null", "/proc/kcore", "", syscall.MS_BIND, ""); err != nil {
 		return fmt.Errorf("unable to bind-mount /dev/null over /proc/kcore")
 	}