From b99ed943865cd3e8b3ab0cbcb8e04720b158799c Mon Sep 17 00:00:00 2001 From: Ophestra Umiker Date: Wed, 9 Oct 2024 00:22:48 +0900 Subject: helper/bwrap: pass --unshare-user when unshare everything Bubblewrap apparently requires --unshare-user even when --unshare-all is set to apply --disable-userns. This behaviour is not clearly documented. Signed-off-by: Ophestra Umiker --- helper/bwrap/config.bool.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'helper/bwrap/config.bool.go') diff --git a/helper/bwrap/config.bool.go b/helper/bwrap/config.bool.go index 81e6ab7b..c30f4df9 100644 --- a/helper/bwrap/config.bool.go +++ b/helper/bwrap/config.bool.go @@ -21,7 +21,7 @@ const ( ) var boolArgs = func() (b [boolC][]string) { - b[UnshareAll] = []string{"--unshare-all"} + b[UnshareAll] = []string{"--unshare-all", "--unshare-user"} b[UnshareUser] = []string{"--unshare-user"} b[UnshareIPC] = []string{"--unshare-ipc"} b[UnsharePID] = []string{"--unshare-pid"} -- cgit v1.3.1