Skip to main content

probe

proot::access

Function probe 

Source 
pub fn probe(ptrace_wanted: bool, stub: Option<bool>) -> Result<Access, String>
Expand description

Decides how the supervisor reaches its tracees.

PROOT_USERNS forces the user namespace (1) or rules it out (0).

§Arguments

  • ptrace_wanted - Whether the ptrace tier is available as far as the syscall filter is concerned; a host that refuses it only through the access check falls back to the no-ptrace mode when a user namespace does not help.
  • stub - Whether the guest-stub restricted mode may be used: Some(false) as the fallback when no combination reaches a child, Some(true) in any case, None never. Ignored where the stub does not exist (neither x86_64 nor aarch64).

§Returns

The mode and, when needed, the user namespace to enter.

§Errors

A message naming what was refused, when no combination reaches a child and the guest-stub restricted mode is unavailable or ruled out.