{"action":"created","issue":{"url":"https://api.github.com/repos/docker/docker/issues/20133","repository_url":"https://api.github.com/repos/docker/docker","labels_url":"https://api.github.com/repos/docker/docker/issues/20133/labels{/name}","comments_url":"https://api.github.com/repos/docker/docker/issues/20133/comments","events_url":"https://api.github.com/repos/docker/docker/issues/20133/events","html_url":"https://github.com/docker/docker/pull/20133","id":132302742,"number":20133,"title":"Prevent mqueue from implicitely becoming a bind mount with --ipc=host","user":{"login":"mlaventure","id":16065150,"avatar_url":"https://avatars.githubusercontent.com/u/16065150?v=3","gravatar_id":"","url":"https://api.github.com/users/mlaventure","html_url":"https://github.com/mlaventure","followers_url":"https://api.github.com/users/mlaventure/followers","following_url":"https://api.github.com/users/mlaventure/following{/other_user}","gists_url":"https://api.github.com/users/mlaventure/gists{/gist_id}","starred_url":"https://api.github.com/users/mlaventure/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mlaventure/subscriptions","organizations_url":"https://api.github.com/users/mlaventure/orgs","repos_url":"https://api.github.com/users/mlaventure/repos","events_url":"https://api.github.com/users/mlaventure/events{/privacy}","received_events_url":"https://api.github.com/users/mlaventure/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-02-09T01:04:16Z","updated_at":"2016-02-09T01:16:44Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/docker/docker/pulls/20133","html_url":"https://github.com/docker/docker/pull/20133","diff_url":"https://github.com/docker/docker/pull/20133.diff","patch_url":"https://github.com/docker/docker/pull/20133.patch"},"body":"Currently, when running a container with `--ipc=host`, if `/dev/mqueue` is\r\na standard directory on the hos the daemon will bind mount it allowing\r\nthe container to create/modify files on the host.\r\n\r\nThis commit forces `/dev/mqueue` to always be of type `mqueue` except when\r\nthe user explicitely requested something to be bind mounted to\r\n`/dev/mqueue`.\r\n\r\nSigned-off-by: Kenfe-Mickael Laventure <mickael.laventure@gmail.com>\r\n\r\n---\r\nping @crosbymichael @rhatdan "},"comment":{"url":"https://api.github.com/repos/docker/docker/issues/comments/181655845","html_url":"https://github.com/docker/docker/pull/20133#issuecomment-181655845","issue_url":"https://api.github.com/repos/docker/docker/issues/20133","id":181655845,"user":{"login":"mlaventure","id":16065150,"avatar_url":"https://avatars.githubusercontent.com/u/16065150?v=3","gravatar_id":"","url":"https://api.github.com/users/mlaventure","html_url":"https://github.com/mlaventure","followers_url":"https://api.github.com/users/mlaventure/followers","following_url":"https://api.github.com/users/mlaventure/following{/other_user}","gists_url":"https://api.github.com/users/mlaventure/gists{/gist_id}","starred_url":"https://api.github.com/users/mlaventure/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mlaventure/subscriptions","organizations_url":"https://api.github.com/users/mlaventure/orgs","repos_url":"https://api.github.com/users/mlaventure/repos","events_url":"https://api.github.com/users/mlaventure/events{/privacy}","received_events_url":"https://api.github.com/users/mlaventure/received_events","type":"User","site_admin":false},"created_at":"2016-02-09T01:16:44Z","updated_at":"2016-02-09T01:16:44Z","body":"Linking #19876 "}}