1
0
mirror of https://github.com/ansible/awx.git synced 2024-11-02 01:21:21 +03:00

properly follow symlinks for bwrap'd working directories

see: https://github.com/ansible/ansible-tower/issues/7741
This commit is contained in:
Ryan Petrello 2017-10-18 17:03:10 -04:00
parent d3eea5e694
commit 10a7544d68
No known key found for this signature in database
GPG Key ID: F2AA5F2122351777

View File

@ -703,6 +703,7 @@ def wrap_args_with_proot(args, cwd, **kwargs):
- /var/log/supervisor
'''
from django.conf import settings
cwd = os.path.realpath(cwd)
new_args = [getattr(settings, 'AWX_PROOT_CMD', 'bwrap'), '--unshare-pid', '--dev-bind', '/', '/']
hide_paths = [settings.AWX_PROOT_BASE_PATH]
if not kwargs.get('isolated'):