mirror of
https://github.com/opencontainers/runc.git
synced 2026-04-22 23:17:17 +08:00
dcc1cf7c1c
The devices cgroup emulator is also useful for removing unneeded rules as well as computing what the final default-allow state of the filter will be (allow-list or deny-list). Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>