Open ezrizhu opened 8 months ago
~
λ cd $(mktemp -d)
/tmp/tmp.LmMxToZOXw
λ mkfifo test
/tmp/tmp.LmMxToZOXw
λ unshare --mount --map-root-user --user --pid --fork /bin/bash
root@sherlock:/tmp/tmp.LmMxToZOXw# echo a > test
root@sherlock:/tmp/tmp.LmMxToZOXw#
~
λ cd /tmp/tmp.LmMxToZOXw
/tmp/tmp.LmMxToZOXw
λ cat test
a
could do fifo
poc exists https://github.com/binpash/try/commit/da611fd0b55b6b9bf269c2f545984c367c2a2f33 now, next step is to incorporate this into main.
ideally we don’t want to use nc.
could use a binary but it’s last resort.
ls -lah
should have the same output inside and outside of try, as a non-root user.