ahamilton/eris
1
0
Fork 0
Code Releases Activity

Let vigil run without sudo.

Browse source 
Now using user namespaces which allow unprivileged users to create
the sandbox.
This commit is contained in:
Andrew Hamilton 2016-11-09 01:26:47 +01:00
parent 5a9b29bb84
commit 60fe921881
8 changed files with 100 additions and 94 deletions
Download patch file Download diff file Expand all files Collapse all files

9
sandbox_fs Executable file
View file

@ -0,0 +1,9 @@
#!/bin/bash
set -e
SCRIPT_PATH=$(realpath $0)
SCRIPT_DIR=$(dirname $SCRIPT_PATH)
unshare --mount --map-root-user "$SCRIPT_DIR/sandbox_fs.py" "$@"