diff --git a/sandbox/mount.go b/sandbox/mount.go index e47e7f5..e2cc290 100644 --- a/sandbox/mount.go +++ b/sandbox/mount.go @@ -13,7 +13,7 @@ const ( BindSource BindRecursive BindWritable - BindDevices + BindDevice ) func bindMount(src, dest string, flags int) error { @@ -66,7 +66,7 @@ func bindMount(src, dest string, flags int) error { if flags&BindWritable == 0 { mf |= syscall.MS_RDONLY } - if flags&BindDevices == 0 { + if flags&BindDevice == 0 { mf |= syscall.MS_NODEV } if msg.IsVerbose() { diff --git a/sandbox/sequential.go b/sandbox/sequential.go index 9b6e34b..bcfded8 100644 --- a/sandbox/sequential.go +++ b/sandbox/sequential.go @@ -89,7 +89,7 @@ func (d MountDev) apply(params *InitParams) error { for _, name := range []string{"null", "zero", "full", "random", "urandom", "tty"} { if err := bindMount( "/dev/"+name, path.Join(v, name), - BindSource|BindDevices, + BindSource|BindDevice, ); err != nil { return err } @@ -132,10 +132,7 @@ func (d MountDev) apply(params *InitParams) error { syscall.SYS_IOCTL, 1, syscall.TIOCGWINSZ, uintptr(unsafe.Pointer(&buf[0])), ); errno == 0 { - if err := bindMount( - "/proc/self/fd/1", path.Join(v, "console"), - BindDevices, - ); err != nil { + if err := bindMount("/proc/self/fd/1", path.Join(v, "console"), BindDevice); err != nil { return err } }