Allow mounting /proc in nsjail for konnectors

With node 12, the konnectors need a read access to /proc to not crash. See nodejs/help#2099 for example.
cozy · Aug 29, 2019 · 21abc49 · 21abc49
1 parent 82502e5
commit 21abc49
Showing 1 changed file with 0 additions and 2 deletions.
diff --git a/scripts/konnector-nsjail-run.sh b/scripts/konnector-nsjail-run.sh
@@ -126,7 +126,6 @@ nsjail \
   --rlimit_nofile 128 \
   --rlimit_nproc 512 \
   --time_limit "${COZY_TIME_LIMIT}" \
-  --disable_proc \
   --disable_clone_newnet \
   --iface_no_lo \
   --seccomp_string "${seccomp_string}" \
@@ -157,7 +156,6 @@ nsjail \
 #   --rlimit_nofile 128 \
 #   --rlimit_nproc 512 \
 #   --time_limit "${COZY_TIME_LIMIT}" \
-#   --disable_proc \
 #   --disable_clone_newnet \
 #   --iface_no_lo \
 #   --seccomp_string "${seccomp_string}" \