diff --git a/libcontainer/cgroups/ebpf/devicefilter/devicefilter_test.go b/libcontainer/cgroups/ebpf/devicefilter/devicefilter_test.go index d279335821d..25703be5ad7 100644 --- a/libcontainer/cgroups/ebpf/devicefilter/devicefilter_test.go +++ b/libcontainer/cgroups/ebpf/devicefilter/devicefilter_test.go @@ -120,21 +120,14 @@ block-8: 51: Mov32Imm dst: r0 imm: 1 52: Exit block-9: -// tuntap (c, 10, 200, rwm, allow) +// /dev/pts (c, 136, wildcard, rwm, true) 53: JNEImm dst: r2 off: -1 imm: 2 - 54: JNEImm dst: r4 off: -1 imm: 10 - 55: JNEImm dst: r5 off: -1 imm: 200 - 56: Mov32Imm dst: r0 imm: 1 - 57: Exit + 54: JNEImm dst: r4 off: -1 imm: 136 + 55: Mov32Imm dst: r0 imm: 1 + 56: Exit block-10: -// /dev/pts (c, 136, wildcard, rwm, true) - 58: JNEImm dst: r2 off: -1 imm: 2 - 59: JNEImm dst: r4 off: -1 imm: 136 - 60: Mov32Imm dst: r0 imm: 1 - 61: Exit -block-11: - 62: Mov32Imm dst: r0 imm: 0 - 63: Exit + 57: Mov32Imm dst: r0 imm: 0 + 58: Exit ` var devices []*devices.Rule for _, device := range specconv.AllowedDevices { diff --git a/libcontainer/specconv/spec_linux.go b/libcontainer/specconv/spec_linux.go index 5ae95c6c18b..83c7a2c348c 100644 --- a/libcontainer/specconv/spec_linux.go +++ b/libcontainer/specconv/spec_linux.go @@ -302,16 +302,6 @@ var AllowedDevices = []*devices.Device{ Allow: true, }, }, - // tuntap - { - Rule: devices.Rule{ - Type: devices.CharDevice, - Major: 10, - Minor: 200, - Permissions: "rwm", - Allow: true, - }, - }, } type CreateOpts struct {