containers / containers/bubblewrap

ptrace in bwrap

Open
#511 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
C
Stars
8.7k
Forks
386
Avg merge
3d 17h
Merged PRs (30d)
11

Description

Hello everyone,

I'm working on a script that helps me to create bwrap profiles. The script collects all dependencies (files, folders, libraries), environment variables and syscalls from a given command.

There is third party software that collects private information, like Android Studio. So, I want to create profiles in a sandbox.
The problem is that strace does not work on bwrap. I tried with `CAP_SYS_ADMIN` and `CAP_SYS_PTRACE` but I get:
```
failed to init breakpoints 43
failed to initialize process 43: Permission denied
couldn't open program '/bin/bash': Permission denied
```

Here is a video of how the script works (if someone wants it, I will share the source code)

https://user-images.githubusercontent.com/33942577/168662826-4278efeb-0182-46bb-a1a1-aa2a858ee4ff.mp4

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.