| package devices |
| |
| var ( |
| // These are devices that are to be both allowed and created. |
| |
| DefaultSimpleDevices = []*Device{ |
| // /dev/null and zero |
| { |
| Path: "/dev/null", |
| Type: 'c', |
| MajorNumber: 1, |
| MinorNumber: 3, |
| CgroupPermissions: "rwm", |
| FileMode: 0666, |
| }, |
| { |
| Path: "/dev/zero", |
| Type: 'c', |
| MajorNumber: 1, |
| MinorNumber: 5, |
| CgroupPermissions: "rwm", |
| FileMode: 0666, |
| }, |
| |
| { |
| Path: "/dev/full", |
| Type: 'c', |
| MajorNumber: 1, |
| MinorNumber: 7, |
| CgroupPermissions: "rwm", |
| FileMode: 0666, |
| }, |
| |
| // consoles and ttys |
| { |
| Path: "/dev/tty", |
| Type: 'c', |
| MajorNumber: 5, |
| MinorNumber: 0, |
| CgroupPermissions: "rwm", |
| FileMode: 0666, |
| }, |
| |
| // /dev/urandom,/dev/random |
| { |
| Path: "/dev/urandom", |
| Type: 'c', |
| MajorNumber: 1, |
| MinorNumber: 9, |
| CgroupPermissions: "rwm", |
| FileMode: 0666, |
| }, |
| { |
| Path: "/dev/random", |
| Type: 'c', |
| MajorNumber: 1, |
| MinorNumber: 8, |
| CgroupPermissions: "rwm", |
| FileMode: 0666, |
| }, |
| } |
| |
| DefaultAllowedDevices = append([]*Device{ |
| // allow mknod for any device |
| { |
| Type: 'c', |
| MajorNumber: Wildcard, |
| MinorNumber: Wildcard, |
| CgroupPermissions: "m", |
| }, |
| { |
| Type: 'b', |
| MajorNumber: Wildcard, |
| MinorNumber: Wildcard, |
| CgroupPermissions: "m", |
| }, |
| |
| { |
| Path: "/dev/console", |
| Type: 'c', |
| MajorNumber: 5, |
| MinorNumber: 1, |
| CgroupPermissions: "rwm", |
| }, |
| { |
| Path: "/dev/tty0", |
| Type: 'c', |
| MajorNumber: 4, |
| MinorNumber: 0, |
| CgroupPermissions: "rwm", |
| }, |
| { |
| Path: "/dev/tty1", |
| Type: 'c', |
| MajorNumber: 4, |
| MinorNumber: 1, |
| CgroupPermissions: "rwm", |
| }, |
| // /dev/pts/ - pts namespaces are "coming soon" |
| { |
| Path: "", |
| Type: 'c', |
| MajorNumber: 136, |
| MinorNumber: Wildcard, |
| CgroupPermissions: "rwm", |
| }, |
| { |
| Path: "", |
| Type: 'c', |
| MajorNumber: 5, |
| MinorNumber: 2, |
| CgroupPermissions: "rwm", |
| }, |
| |
| // tuntap |
| { |
| Path: "", |
| Type: 'c', |
| MajorNumber: 10, |
| MinorNumber: 200, |
| CgroupPermissions: "rwm", |
| }, |
| |
| /*// fuse |
| { |
| Path: "", |
| Type: 'c', |
| MajorNumber: 10, |
| MinorNumber: 229, |
| CgroupPermissions: "rwm", |
| }, |
| |
| // rtc |
| { |
| Path: "", |
| Type: 'c', |
| MajorNumber: 254, |
| MinorNumber: 0, |
| CgroupPermissions: "rwm", |
| }, |
| */ |
| }, DefaultSimpleDevices...) |
| |
| DefaultAutoCreatedDevices = append([]*Device{ |
| { |
| // /dev/fuse is created but not allowed. |
| // This is to allow java to work. Because java |
| // Insists on there being a /dev/fuse |
| // https://github.com/dotcloud/docker/issues/514 |
| // https://github.com/dotcloud/docker/issues/2393 |
| // |
| Path: "/dev/fuse", |
| Type: 'c', |
| MajorNumber: 10, |
| MinorNumber: 229, |
| CgroupPermissions: "rwm", |
| }, |
| }, DefaultSimpleDevices...) |
| ) |
