diff --git a/sandbox/sandbox-linux.cpp b/sandbox/sandbox-linux.cpp index ad31d49..2add804 100644 --- a/sandbox/sandbox-linux.cpp +++ b/sandbox/sandbox-linux.cpp @@ -196,6 +196,19 @@ bool SandboxLinux::enablePreWorker(std::vector fsPaths) bool SandboxLinux::supported() { + std::fstream stream; + stream.open("/proc/sys/kernel/unprivileged_userns_clone"); + if(stream.is_open()) + { + std::string str; + stream >> str; + if(str[0] == '0') + { + Logger::error() << "Please write '1' to /proc/sys/kernel/unprivileged_userns_clone in order to enable " + "sandboxing support on this system"; + return false; + } + } return true; } bool SandboxLinux::enableForWorker()