Commit e458215f authored by vvb2060's avatar vvb2060 Committed by John Wu

Let isolation namespace base on app namespace

parent fee4031d
......@@ -293,6 +293,7 @@ void su_daemon_handler(int client, struct ucred *credential) {
break;
case NAMESPACE_MODE_ISOLATE:
LOGD("su: use new isolated namespace\n");
switch_mnt_ns(ctx.pid);
xunshare(CLONE_NEWNS);
xmount(nullptr, "/", nullptr, MS_PRIVATE | MS_REC, nullptr);
break;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment