Fix oldstable build v2

phylum-dev · Nov 28, 2023 · dc372b6 · dc372b6
1 parent e1f5143
commit dc372b6
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 5 deletions.
diff --git a/src/linux/mod.rs b/src/linux/mod.rs
@@ -77,10 +77,6 @@ impl Sandbox for LinuxSandbox {
             sandboxee.pre_exec(move || post_fork(uid, gid, self.allow_networking)).spawn()?
         };
 
-        // TODO
-        // Drop root user mapping for the parent process.
-        // namespaces::create_user_namespace(uid, gid, Namespaces::empty()).unwrap();
-
         Ok(child)
     }
 }

diff --git a/src/linux/namespaces.rs b/src/linux/namespaces.rs
@@ -20,7 +20,7 @@ const NEW_ROOT: &str = "/tmp/birdcage-root";
 ///
 /// This will deny access to any path which isn't part of `bind_mounts`. Allowed
 /// paths are mounted according to their bind mount flags.
-pub fn setup_mount_namespace(exceptions: PathExceptions) -> io::Result<()> {
+pub(crate) fn setup_mount_namespace(exceptions: PathExceptions) -> io::Result<()> {
     // Get target paths for new and old root.
     let new_root = PathBuf::from(NEW_ROOT);