mirror of
https://github.com/containers/podman.git
synced 2025-07-15 03:02:52 +08:00

The intention of --read-only-tmpfs=fals when in --read-only mode was to not allow any processes inside of the container to write content anywhere, unless the caller also specified a volume or a tmpfs. Having /dev and /dev/shm writable breaks this assumption. Fixes: https://github.com/containers/podman/issues/12937 Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>