Merge pull request containers#8878 from mheon/no_edit_config

Ensure we do not edit container config in Exec
vrothberg · Jan 5, 2021 · 618c355 · 618c355
2 parents ced7c0a + 960607a
commit 618c355
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/libpod/oci_conmon_linux.go b/libpod/oci_conmon_linux.go
@@ -1195,7 +1195,10 @@ func prepareProcessExec(c *Container, options *ExecOptions, env []string, sessio
 	if err != nil {
 		return nil, err
 	}
-	pspec := c.config.Spec.Process
+	pspec := new(spec.Process)
+	if err := JSONDeepCopy(c.config.Spec.Process, pspec); err != nil {
+		return nil, err
+	}
 	pspec.SelinuxLabel = c.config.ProcessLabel
 	pspec.Args = options.Cmd
 	for _, cap := range options.CapAdd {