retain read only root file system in determineEffectiveSecurityContext

332054781 · May 11, 2016 · 04dc71f · 04dc71f
1 parent e0f7de9
commit 04dc71f
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/pkg/securitycontext/provider.go b/pkg/securitycontext/provider.go
@@ -159,6 +159,11 @@ func DetermineEffectiveSecurityContext(pod *api.Pod, container *api.Container) *
 		*effectiveSc.RunAsNonRoot = *containerSc.RunAsNonRoot
 	}
 
+	if containerSc.ReadOnlyRootFilesystem != nil {
+		effectiveSc.ReadOnlyRootFilesystem = new(bool)
+		*effectiveSc.ReadOnlyRootFilesystem = *containerSc.ReadOnlyRootFilesystem
+	}
+
 	return effectiveSc
 }