crtxcr
/
qswiki
1
0
Vork 0
Code Kwesties 21 Pull-aanvragen 1 Publicaties Activiteit

sandboxing: check whether debian specific patch disables user namespaces for unpriv users

This commit is contained in:
Albert S. 2019-08-12 09:06:32 +02:00
bovenliggende cc47b2823e
commit efd7aff613
1 gewijzigde bestanden met toevoegingen van 12 en 0 verwijderingen
Statistieken weergeven Download Patch-bestand Download Diff-bestand Expand all files Collapse all files

12
sandbox/sandbox-linux.cpp
Bestand weergeven

@ -200,6 +200,18 @@ bool SandboxLinux::enablePreWorker(std::vector<std::string> fsPaths)
bool SandboxLinux::supported()
{
std::fstream stream;
stream.open("/proc/sys/kernel/unprivileged_userns_clone");
if(stream.is_open())
{
std::string str;
stream >> str;
if(str[0] == '0')
{
Logger::error() << "Please write '1' to /proc/sys/kernel/unprivileged_userns_clone in order to enable sandboxing support on this system";
return false;
}
}
return true;
}
bool SandboxLinux::enableForWorker()