Comment on Implement unprivileged chrootparentComments−wizzwizz45yBecause cap_enter() blocks that too.−remram5ySpecifically, it blocks going higher than the handle, so using either absolute paths or paths with a ".." component.Not sure if anything changes for symlinks.
Comments
Because cap_enter() blocks that too.
Specifically, it blocks going higher than the handle, so using either absolute paths or paths with a ".." component.
Not sure if anything changes for symlinks.