Vasyl Gello

@happyCoder92 @robertswiecki please review it and merge! This fixes a CVE used in many CTFs and also allows using nsjail as a Linux container replacement in fully rootless mode.

Hi! Yes, I noticed the request! Let me wrap around Android ASB & get back to it this weekend.

I encountered the same issue + the 'mirrored' one: the amd64 kernel allows not only x32 runtimes but also i386, but only one architecture is checked in BPF policy. To...

Sounds like a DNS resolver issue within VPN. Please supply information about VPN provider and OS you use at least.

> Perhaps adding or shadowing to this code block would be enough? Let me try :) No, does not work. Let me figure out how do I check the correct...

Yes! I will need to doing a PoC. The only reliable way is to get pid of process serving the socket and parse its cmdline to get path to xauthority...

@totaam `/var/run/lightdm/Xauthority-root`. But let me explain the detectiin logic or PR it next morning

> Fixing that is _very hard_. And _very annoying_ :rofl: It is on my hitlist, let's see what can I do with this particular :bug: :)

What distribution is it? Does it provide `/run/user/$UID`? 4.3 trunk creates `/run/user/$UID/xpra` directory if needed on server startup, but only if parent directory exists. It probably makes sense to create...

Then I guess @totaam will define FreeBSD as a separate platform because in Xpra too many code targeting Linux relies on {/var,}/run/user.