[stable/falco]: Restrict access to /dev on underlying host to (#17841)

Signed-off-by: Fahad Arshad <fahad.arshad@hobsons.com>

stable/falco/CHANGELOG.md

@@ -3,6 +3,12 @@
 This file documents all notable changes to Sysdig Falco Helm Chart. The release
 numbering uses [semantic versioning](http://semver.org).
 
+## v1.0.9
+
+### Minor Changes
+
+* Restrict the access to `/dev` on underlying host to read only
+
 ## v1.0.8
 
 ### Minor Changes

stable/falco/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v1
 name: falco
-version: 1.0.8
+version: 1.0.9
 appVersion: 0.17.1
 description: Falco
 keywords:

stable/falco/templates/daemonset.yaml

@@ -90,6 +90,7 @@ spec:
             {{- end}}
             - mountPath: /host/dev
               name: dev-fs
+              readOnly: true
             - mountPath: /host/proc
               name: proc-fs
               readOnly: true