containers / containers/bubblewrap
[Feature] option --ignore-chown
- Dominant language
- C
- Stars
- 8.7k
- Forks
- 386
- Avg merge
- 3d 17h
- Merged PRs (30d)
- 11
Description
What do you think about adding a new option to bwrap which will ignore errors when programs attempt to run `chown`?
I think it's common in user namespaces to pretend to be root, so programs may expect the ability to `chown`. However if there UID 0 is just mapped to a regular user's UID this will fail. It would be convenient if I could ignore these calls.
This could be done fairly easily with libseccomp if bwrap would respond to seccomp notifications. See the python example: https://github.com/seccomp/libseccomp/blob/master/tests/58-live-tsync_notify.py
Related: https://github.com/containers/bubblewrap/issues/210
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.