Ensure securityfs is mounted readonly in container
Ensure securityfs is mounted readonly in container

If securityfs is available on the host, we should ensure to
mount it read-only in the container. This will avoid systemd
trying to mount it during startup causing SELinux AVCs.

Signed-off-by: Daniel P. Berrange <bb938cf255e055ff3507f2627d214e8e62118fcf@redhat.com>

nertpinx/libvirt,crobinso/libvirt,cbosdo/libvirt,olafhering/libvirt,datto/libvirt,zippy2/libvirt,libvirt/libvirt,rlaager/libvirt,zippy2/libvirt,jfehlig/libvirt,crobinso/libvirt,nertpinx/libvirt,jardasgit/libvirt,andreabolognani/libvirt,datto/libvirt,eskultety/libvirt,eskultety/libvirt,rlaager/libvirt,eskultety/libvirt,crobinso/libvirt,jardasgit/libvirt,VenkatDatta/libvirt,andreabolognani/libvirt,taget/libvirt,fabianfreyer/libvirt,elmarco/libvirt,nertpinx/libvirt,zhlcindy/libvirt-1.1.4-maintain,VenkatDatta/libvirt,agx/libvirt,jfehlig/libvirt,zhlcindy/libvirt-1.1.4-maintain,libvirt/libvirt,taget/libvirt,agx/libvirt,nertpinx/libvirt,crobinso/libvirt,libvirt/libvirt,datto/libvirt,datto/libvirt,fabianfreyer/libvirt,libvirt/libvirt,jardasgit/libvirt,shugaoye/libvirt,jardasgit/libvirt,agx/libvirt,zippy2/libvirt,agx/libvirt,zippy2/libvirt,agx/libvirt,shugaoye/libvirt,elmarco/libvirt,shugaoye/libvirt,elmarco/libvirt,olafhering/libvirt,rlaager/libvirt,andreabolognani/libvirt,eskultety/libvirt,nertpinx/libvirt,elmarco/libvirt,VenkatDatta/libvirt,olafhering/libvirt,andreabolognani/libvirt,eskultety/libvirt,shugaoye/libvirt,cbosdo/libvirt,jfehlig/libvirt,VenkatDatta/libvirt,cbosdo/libvirt,zhlcindy/libvirt-1.1.4-maintain,fabianfreyer/libvirt,andreabolognani/libvirt,zhlcindy/libvirt-1.1.4-maintain,datto/libvirt,olafhering/libvirt,zhlcindy/libvirt-1.1.4-maintain,rlaager/libvirt,jardasgit/libvirt,cbosdo/libvirt,VenkatDatta/libvirt,shugaoye/libvirt,taget/libvirt,rlaager/libvirt,cbosdo/libvirt,taget/libvirt,taget/libvirt,elmarco/libvirt,fabianfreyer/libvirt,jfehlig/libvirt,fabianfreyer/libvirt