container/autoroot: filter dentry with empty name

This is unreachable, but nice to have just in case.

Signed-off-by: Ophestra <cat@gensokyo.uk>

1 files changed, 2 insertions, 0 deletions

diff --git a/container/autoroot.go b/container/autoroot.go
index 215a7bb3..6145ec6f 100644
--- a/container/autoroot.go
+++ b/container/autoroot.go
@@ -89,6 +89,8 @@ func IsAutoRootBindable(name string) bool {
 	case "mnt":
 	case "etc":
 
+	case "": // guard against accidentally binding /
+
 	default:
 		return true
 	}