{"push_id":722563340,"size":2,"distinct_size":2,"ref":"refs/heads/master","head":"703248da20566f707b8290662805a9264629e2e0","before":"892ac93ec9fce417dfca9ce397c8e1d771b604e8","commits":[{"sha":"5400d8873f730e6099d29af49fe45931665c3b49","author":{"email":"96f164ad4d9b2b0dacf8ebee2bb1eeb3aa69adf1@windisch.us","name":"Eric Windisch"},"message":"Make /proc, /sys, /dev readonly for readonly containers\n\nIf a container is read-only, also set /proc, /sys,\n& /dev to read-only. This should apply to both privileged and\nunprivileged containers.\n\nNote that when /dev is read-only, device files may still be\nwritten to. This change will simply prevent the device paths\nfrom being modified, or performing mknod of new devices within\nthe /dev path.\n\nTests are included for all cases. Also adds a test to ensure\nthat /dev/pts is always mounted read/write, even in the case of a\nread-write rootfs. The kernel restricts writes here naturally and\nbad things will happen if we mount it ro.\n\nSigned-off-by: Eric Windisch <eric@windisch.us>","distinct":true,"url":"https://api.github.com/repos/docker/docker/commits/5400d8873f730e6099d29af49fe45931665c3b49"},{"sha":"703248da20566f707b8290662805a9264629e2e0","author":{"email":"44e574e7912703dcf84b7bb7d24ac13db279e39f@users.noreply.github.com","name":"Jessie Frazelle"},"message":"Merge pull request #13669 from ewindisch/readonly-proc\n\nMake /proc, /sys, & /dev readonly for readonly containers","distinct":true,"url":"https://api.github.com/repos/docker/docker/commits/703248da20566f707b8290662805a9264629e2e0"}]}