From 3133664a11ce77f15b0b2a2ed3c104ce337e59f5 Mon Sep 17 00:00:00 2001
From: Sven Dowideit <SvenDowideit@home.org.au>
Date: Fri, 17 Feb 2017 18:31:02 +0000
Subject: [PATCH] Looks like /sys/fs/selinux should be mounted ro

Signed-off-by: Sven Dowideit <SvenDowideit@home.org.au>
---
 dfs/scratch.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/dfs/scratch.go b/dfs/scratch.go
index 354096f5..7ba93acb 100644
--- a/dfs/scratch.go
+++ b/dfs/scratch.go
@@ -38,7 +38,7 @@ var (
 		{"none", "/sys/fs/cgroup", "tmpfs", ""},
 	}
 	optionalMounts = [][]string{
-		{"none", "/sys/fs/selinux", "selinuxfs", ""},
+		{"none", "/sys/fs/selinux", "selinuxfs", "ro"},
 	}
 )