From addc83b30fde28136d81c3fc9fe0e645d57b7df0 Mon Sep 17 00:00:00 2001
From: Antonio Murdaca <runcom@redhat.com>
Date: Sat, 29 Apr 2017 13:03:58 +0200
Subject: [PATCH] make secret mount rprivate

Signed-off-by: Antonio Murdaca <runcom@redhat.com>
---
 container/container_unix.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/container/container_unix.go b/container/container_unix.go
index 4f6b795d2c3be..cfb6b2aa2d351 100644
--- a/container/container_unix.go
+++ b/container/container_unix.go
@@ -263,6 +263,7 @@ func (container *Container) SecretMount() *Mount {
 			Source:      container.SecretMountPath(),
 			Destination: containerSecretMountPath,
 			Writable:    false,
+			Propagation: "rprivate",
 		}
 	}