Hold lock when updating DefaultMounts

Signed-off-by: Maksim An <maksiman@microsoft.com>
microsoft · Apr 22, 2022 · 537905b · 537905b
1 parent db5e1b1
commit 537905b
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/pkg/securitypolicy/securitypolicyenforcer.go b/pkg/securitypolicy/securitypolicyenforcer.go
@@ -616,6 +616,9 @@ func (pe *StandardSecurityPolicyEnforcer) enforceDefaultMounts(specMount oci.Mou
 }
 
 func (pe *StandardSecurityPolicyEnforcer) ExtendDefaultMounts(defaultMounts []oci.Mount) error {
+	pe.mutex.Lock()
+	defer pe.mutex.Unlock()
+
 	for _, mnt := range defaultMounts {
 		pe.DefaultMounts = append(pe.DefaultMounts, newMountConstraint(
 			mnt.Source,