Closed
Description
The jailer creates the /dev
, /dev/net
and /run
folders inside the jail but doesn't ensure that they're accessible for the unprivileged user which firecracker will run under. This can lead to errors when attempting to open devices (dev/kvm
and /dev/net/tun
), even if the permissions on the devices themselves are correctly set.
firecracker/src/jailer/src/env.rs
Line 180 in 8943f41