Gecko [ lorencats.com ]

Name	Size	Permission
bubblewrap-shell.sh	1.18 KB	-rwxr-xr-x
flatpak-run.sh	2.57 KB	-rwxr-xr-x
flatpak.bpf	744 B	-rw-r--r--
userns-block-fd.py	1012 B	-rwxr-xr-x

Code Editor : userns-block-fd.py

#!/usr/bin/env python3

import os, select, subprocess, sys, json

pipe_info = os.pipe()
userns_block = os.pipe()

pid = os.fork()

if pid != 0:
    os.close(pipe_info[1])
    os.close(userns_block[0])

select.select([pipe_info[0]], [], [])

data = json.load(os.fdopen(pipe_info[0]))
    child_pid = str(data['child-pid'])

subprocess.call(["newuidmap", child_pid, "0", str(os.getuid()), "1"])
    subprocess.call(["newgidmap", child_pid, "0", str(os.getgid()), "1"])

os.write(userns_block[1], b'1')
else:
    os.close(pipe_info[0])
    os.close(userns_block[1])

if sys.version_info >= (3, 4):
        os.set_inheritable(pipe_info[1], True)
        os.set_inheritable(userns_block[0], True)

args = ["bwrap",
            "bwrap",
            "--unshare-all",
            "--unshare-user",
            "--userns-block-fd", "%i" % userns_block[0],
            "--info-fd", "%i" % pipe_info[1],
            "--bind", "/", "/",
            "cat", "/proc/self/uid_map"]

os.execlp(*args)

${this.title}

Code Editor : userns-block-fd.py