# imagefile directory will be bind-mounted mkdir /mnt/secure/asec 0700 root root mount tmpfs tmpfs /mnt/secure/asec mode=0700,uid=0,gid=0 restorecon -R /mnt/secure/asec # Secure container public mount points. mkdir /mnt/asec 0700 root system mount tmpfs tmpfs /mnt/asec mode=0755,gid=...