Skip to content
Commit f7f2aae1 authored by segfault's avatar segfault
Browse files

Disable unprivileged userns and make bwrap setuid root 

A setuid bwrap binary is more secure than allowing unprivileged user
namespaces and still good enough for sandboxing purposes.

Closes #15725
parent 2b863353
Hide whitespace changes
Inline Side-by-side
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment