An updated Docker-Runc packages has been released for openSUSE Leap 15.0 to LSM bypass via malicious Docker images that mount over a /proc directory   Docker-Runc Update for openSUSE