namespace: unmount old /dev under our new private /dev (#3254)

Drop all dangling old /dev mounts before mounting a new private /dev tree.

diff --git a/src/core/namespace.c b/src/core/namespace.c
index b573f008b9124e397102a25ab3400e2da7e5e66d..ef85bfec237887239c32c324aa9532b71502e008 100644 (file)
--- a/src/core/namespace.c
+++ b/src/core/namespace.c
@@ -237,6 +237,8 @@ static int mount_dev(BindMount *m) {
          */
         (void) mkdir_p_label(m->path, 0755);
 
+        /* Unmount everything in old /dev */
+        umount_recursive(m->path, 0);
         if (mount(dev, m->path, NULL, MS_MOVE, NULL) < 0) {
                 r = -errno;
                 goto fail;