Update securitypolicy tool docs

Signed-off-by: Maksim An <maksiman@microsoft.com>
microsoft · Mar 21, 2022 · bb409bb · bb409bb
1 parent 05b8dc2
commit bb409bb
Showing 1 changed file with 48 additions and 3 deletions.
diff --git a/internal/tools/securitypolicy/README.md b/internal/tools/securitypolicy/README.md
@@ -25,6 +25,16 @@ working_dir = "/home/user"
 [[container.env_rule]]
 strategy = "re2"
 rule = "PREFIX_.+=.+"
+
+[[container.mount]]
+host_path = "sandbox://host/path/one"
+container_path = "/container/path/one"
+readonly = false
+
+[[container.mount]]
+host_path = "sandbox://host/path/two"
+container_path = "/container/path/two"
+readonly = true
 ```
 
 ### Converted to JSON
@@ -86,7 +96,38 @@ represented in JSON.
             "5": "1b80f120dbd88e4355d6241b519c3e25290215c469516b49dece9cf07175a766"
           }
         },
-        "working_dir": "/home/user"
+        "working_dir": "/home/user",
+        "mounts": {
+          "length": 2,
+          "elements": {
+            "0": {
+              "source": "sandbox://host/path/one",
+              "destination": "/container/path/one",
+              "type": "bind",
+              "options": {
+                "length": 3,
+                "elements": {
+                  "0": "rbind",
+                  "1": "rprivate",
+                  "2": "rw"
+                }
+              }
+            },
+            "1": {
+              "source": "sandbox://host/path/two",
+              "destination": "/container/path/two",
+              "type": "bind",
+              "options": {
+                "length": 3,
+                "elements": {
+                  "0": "rbind",
+                  "1": "rprivate",
+                  "2": "ro"
+                }
+              }
+            }
+          }
+        }
       },
       "1": {
         "command": {
@@ -114,7 +155,11 @@ represented in JSON.
             "0": "16b514057a06ad665f92c02863aca074fd5976c755d26bff16365299169e8415"
           }
         },
-        "working_dir": "/"
+        "working_dir": "/",
+        "mounts": {
+          "length": 0,
+          "elements": {}
+        }
       }
     }
   }
@@ -138,7 +183,7 @@ authorization information for a given image, you would add an `[auth]` object
 to the TOML definiton for that image. For example:
 
 ```toml
-[[image]]
+[[container]]
 image_name = "rust:1.52.1"
 command = ["rustc", "--help"]