containers / containers/bubblewrap

[Feature] option --ignore-chown

Open
#395 6 comments 4 reactions 0 assignees View on GitHub
Dominant language
C
Stars
8.7k
Forks
386
Avg merge
3d 17h
Merged PRs (30d)
11

Description

What do you think about adding a new option to bwrap which will ignore errors when programs attempt to run `chown`?

I think it's common in user namespaces to pretend to be root, so programs may expect the ability to `chown`. However if there UID 0 is just mapped to a regular user's UID this will fail. It would be convenient if I could ignore these calls.

This could be done fairly easily with libseccomp if bwrap would respond to seccomp notifications. See the python example: https://github.com/seccomp/libseccomp/blob/master/tests/58-live-tsync_notify.py

Related: https://github.com/containers/bubblewrap/issues/210

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.