diff options
Diffstat (limited to 'libmat2/subprocess.py')
| -rw-r--r-- | libmat2/subprocess.py | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/libmat2/subprocess.py b/libmat2/subprocess.py index cf24176..f1142be 100644 --- a/libmat2/subprocess.py +++ b/libmat2/subprocess.py | |||
| @@ -49,8 +49,14 @@ def _get_bwrap_args(tempdir: str, | |||
| 49 | 49 | ||
| 50 | args = ro_bind_args + \ | 50 | args = ro_bind_args + \ |
| 51 | ['--dev', '/dev', | 51 | ['--dev', '/dev', |
| 52 | '--proc', '/proc', | ||
| 52 | '--chdir', cwd, | 53 | '--chdir', cwd, |
| 53 | '--unshare-all', | 54 | '--unshare-user-try', |
| 55 | '--unshare-ipc', | ||
| 56 | '--unshare-pid', | ||
| 57 | '--unshare-net', | ||
| 58 | '--unshare-uts', | ||
| 59 | '--unshare-cgroup-try', | ||
| 54 | '--new-session', | 60 | '--new-session', |
| 55 | # XXX: enable --die-with-parent once all supported platforms have | 61 | # XXX: enable --die-with-parent once all supported platforms have |
| 56 | # a bubblewrap recent enough to support it. | 62 | # a bubblewrap recent enough to support it. |
