commit 8b2d77f9c62593c92c6fc630b435b7c7bee86539
author Treehugger Robot <treehugger-gerrit@google.com> Wed Jul 11 17:38:13 2018 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Wed Jul 11 17:38:13 2018 +0000
tree 033e7df9d8aa57c97cb7d35f379c04de7ec40738
parent ade24412b75dfd85d2378adbcb29e8337dee7e49
parent 055429df74353d1c0adb668f5b13b32cd5af5d5c

Merge "init.rc: Remount / with MS_REMOUNT|MS_BIND|MS_NODEV"

rootdir/init.rc

diff --git a/rootdir/init.rc b/rootdir/init.rc
index c1ae932..d3f038e 100644
--- a/rootdir/init.rc
+++ b/rootdir/init.rc
@@ -318,8 +318,8 @@
     start vndservicemanager
 
     # Once everything is setup, no need to modify /.
-    # The bind+ro combination avoids modifying any other mount flags.
-    mount rootfs rootfs / remount bind ro
+    # The bind+remount combination allows this to work in containers.
+    mount rootfs rootfs / remount bind ro nodev
     # Mount shared so changes propagate into child namespaces
     mount rootfs rootfs / shared rec
     # Mount default storage into root namespace