container/autoroot: filter dentry with empty name

This is unreachable, but nice to have just in case. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-08-20 01:03:49 +09:00
parent 13c7083bc0
commit e0533aaa68
2 changed files with 28 additions and 0 deletions
--- a/container/autoroot.go
+++ b/container/autoroot.go
@@ -89,6 +89,8 @@ func IsAutoRootBindable(name string) bool {
 	case "mnt":
 	case "etc":

+	case "": // guard against accidentally binding /
+
 	default:
 		return true
 	}