From 10a7544d68406d0f6941691cf64caf46d52a1b33 Mon Sep 17 00:00:00 2001
From: Ryan Petrello <rpetrell@redhat.com>
Date: Wed, 18 Oct 2017 17:03:10 -0400
Subject: [PATCH] properly follow symlinks for bwrap'd working directories

see: https://github.com/ansible/ansible-tower/issues/7741
---
 awx/main/utils/common.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/awx/main/utils/common.py b/awx/main/utils/common.py
index c370769f84..f183890a7f 100644
--- a/awx/main/utils/common.py
+++ b/awx/main/utils/common.py
@@ -703,6 +703,7 @@ def wrap_args_with_proot(args, cwd, **kwargs):
      - /var/log/supervisor
     '''
     from django.conf import settings
+    cwd = os.path.realpath(cwd)
     new_args = [getattr(settings, 'AWX_PROOT_CMD', 'bwrap'), '--unshare-pid', '--dev-bind', '/', '/']
     hide_paths = [settings.AWX_PROOT_BASE_PATH]
     if not kwargs.get('isolated'):