@@ -628,7 +628,7 @@ func setMounts(daemon *Daemon, s *specs.Spec, c *container.Container, mounts []c

 	if s.Root.Readonly {

 		for i, m := range s.Mounts {

 			switch m.Destination {

-			case "/proc", "/dev/pts", "/dev/mqueue": // /dev is remounted by runc

+			case "/proc", "/dev/pts", "/dev/mqueue", "/dev":

 				continue

 			}

 			if _, ok := userMounts[m.Destination]; !ok {

@@ -2729,7 +2729,7 @@ func (s *DockerSuite) TestRunContainerWithReadonlyRootfs(c *check.C) {

 	if root := os.Getenv("DOCKER_REMAP_ROOT"); root != "" {

 		testPriv = false

 	}

-	testReadOnlyFile(c, testPriv, "/file", "/etc/hosts", "/etc/resolv.conf", "/etc/hostname", "/sys/kernel", "/dev/.dont.touch.me")

+	testReadOnlyFile(c, testPriv, "/file", "/etc/hosts", "/etc/resolv.conf", "/etc/hostname", "/sys/kernel")

 }

 func (s *DockerSuite) TestPermissionsPtsReadonlyRootfs(c *check.C) {