Device permissions are broken in 18.02 #228
Description
- This is a bug report
- This is a feature request
- I searched existing issues before opening this one
Expected behavior
[host]# docker run --device /dev/snd:/dev/snd -ti myimage
[container]# ls -la /dev/snd
total 0
drwxr-xr-x 2 root root 280 Feb 14 04:59 .
drwxr-xr-x 7 root root 400 Feb 14 04:59 ..
crw-rw---- 1 root audio 116, 2 Feb 14 05:01 controlC0
----
crw-rw---- 1 root audio 116, 1 Feb 14 05:01 seq
crw-rw---- 1 root audio 116, 33 Feb 14 05:01 timer
Actual behavior
[host]# docker run --device /dev/snd:/dev/snd -ti myimage
[container]# ls -la /dev/snd
total 0
drwxr-xr-x 2 root root 280 Feb 14 04:59 .
drwxr-xr-x 7 root root 400 Feb 14 04:59 ..
crw-rw---- 1 root root 116, 2 Feb 14 04:59 controlC0
----
crw-rw---- 1 root root 116, 1 Feb 14 04:59 seq
crw-rw---- 1 root root 116, 33 Feb 14 04:59 timer
For some reason after update to 18.02 all devices in /dev/snd have root group. In 18.01 they had audio group as well as on host.
Steps to reproduce the behavior
Run on 18.01 and 18.02:
[host]# docker run --device /dev/snd:/dev/snd -ti myimage
[container]# ls -la /dev/snd
Output of docker version:
Client:
Version: 18.02.0-ce
API version: 1.36
Go version: go1.9.4
Git commit: fc4de447b5
Built: Tue Feb 13 15:28:01 2018
OS/Arch: linux/amd64
Experimental: false
Orchestrator: swarm
Server:
Engine:
Version: 18.02.0-ce
API version: 1.36 (minimum version 1.12)
Go version: go1.9.4
Git commit: fc4de447b5
Built: Tue Feb 13 15:28:34 2018
OS/Arch: linux/amd64
Experimental: false
Output of docker info:
Containers: 2
Running: 0
Paused: 0
Stopped: 2
Images: 28
Server Version: 18.02.0-ce
Storage Driver: overlay2
Backing Filesystem: extfs
Supports d_type: true
Native Overlay Diff: false
Logging Driver: json-file
Cgroup Driver: cgroupfs
Plugins:
Volume: local
Network: bridge host macvlan null overlay
Log: awslogs fluentd gcplogs gelf journald json-file logentries splunk syslog
Swarm: inactive
Runtimes: runc
Default Runtime: runc
Init Binary: docker-init
containerd version: 9b55aab90508bd389d7654c4baf173a981477d55
runc version: 9f9c96235cc97674e935002fc3d78361b696a69e
init version: 949e6fa
Security Options:
seccomp
Profile: default
Kernel Version: 4.15.3-1-ARCH
Operating System: Arch Linux
OSType: linux
Architecture: x86_64
CPUs: 4
Total Memory: 31.38GiB
Docker Root Dir: /var/lib/docker
Debug Mode (client): false
Debug Mode (server): false
Registry: https://index.docker.io/v1/
Labels:
Experimental: false
Insecure Registries:
127.0.0.0/8
Live Restore Enabled: false