Merge pull request ansible#1154 from wenottingham/namespaces-the-fina…

…l-frontier Have bubblewrap mount a new /proc in the wrapped environment.
ShaunBoughey · Feb 7, 2018 · e982f6e · e982f6e
2 parents fb5428d + c1a0e2c
commit e982f6e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/awx/main/utils/common.py b/awx/main/utils/common.py
@@ -766,7 +766,7 @@ def wrap_args_with_proot(args, cwd, **kwargs):
     '''
     from django.conf import settings
     cwd = os.path.realpath(cwd)
-    new_args = [getattr(settings, 'AWX_PROOT_CMD', 'bwrap'), '--unshare-pid', '--dev-bind', '/', '/']
+    new_args = [getattr(settings, 'AWX_PROOT_CMD', 'bwrap'), '--unshare-pid', '--dev-bind', '/', '/', '--proc', '/proc']
     hide_paths = [settings.AWX_PROOT_BASE_PATH]
     if not kwargs.get('isolated'):
         hide_paths.extend(['/etc/tower', '/var/lib/awx', '/var/log',