Commit cacb34a7 authored by Jürg Billeter's avatar Jürg Billeter
Browse files

sandbox/_sandboxbwrap.py: Unshare IPC namespace in build sandbox 

Isolate sandbox processes from System V IPC.
parent bd05e2e6

buildstream/sandbox/_sandboxbwrap.py

+1 −0
Original line number Diff line number Diff line
@@ -94,6 +94,7 @@ class SandboxBwrap(Sandbox): 
        if not flags & SandboxFlags.NETWORK_ENABLED:

            bwrap_command += ['--unshare-net']

            bwrap_command += ['--unshare-uts', '--hostname', 'buildstream']

            bwrap_command += ['--unshare-ipc']



        if cwd is not None:

            bwrap_command += ['--chdir', cwd]