{"action":"created","issue":{"url":"https://api.github.com/repos/mhiramat/mincs/issues/10","repository_url":"https://api.github.com/repos/mhiramat/mincs","labels_url":"https://api.github.com/repos/mhiramat/mincs/issues/10/labels{/name}","comments_url":"https://api.github.com/repos/mhiramat/mincs/issues/10/comments","events_url":"https://api.github.com/repos/mhiramat/mincs/issues/10/events","html_url":"https://github.com/mhiramat/mincs/issues/10","id":193940784,"number":10,"title":"capsh doesn't work with the container image which has no /bin/bash","user":{"login":"mhiramat","id":560280,"avatar_url":"https://avatars.githubusercontent.com/u/560280?v=3","gravatar_id":"","url":"https://api.github.com/users/mhiramat","html_url":"https://github.com/mhiramat","followers_url":"https://api.github.com/users/mhiramat/followers","following_url":"https://api.github.com/users/mhiramat/following{/other_user}","gists_url":"https://api.github.com/users/mhiramat/gists{/gist_id}","starred_url":"https://api.github.com/users/mhiramat/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mhiramat/subscriptions","organizations_url":"https://api.github.com/users/mhiramat/orgs","repos_url":"https://api.github.com/users/mhiramat/repos","events_url":"https://api.github.com/users/mhiramat/events{/privacy}","received_events_url":"https://api.github.com/users/mhiramat/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2016-12-07T02:20:52Z","updated_at":"2016-12-10T14:53:20Z","closed_at":null,"body":"Capsh is a great tool to drop capabilities for preventing jailbreak from chroot.\r\nHowever, it hardcodes /bin/bash to run(in chrooted rootfs), thus we can not run\r\ncontainers which don't have /bin/bash.\r\n\r\nMaybe we have 3 options;\r\n- If there is no /bin/bash but /bin/sh, add a wrapper shell script as /bin/bash. (which just exec /bin/sh with given parameters)\r\n- If there is no /bin/sh, we just fail to run, and warn the reason.\r\n- Fix capsh (to use /bin/sh or just directly run given command) or make another command."},"comment":{"url":"https://api.github.com/repos/mhiramat/mincs/issues/comments/266214009","html_url":"https://github.com/mhiramat/mincs/issues/10#issuecomment-266214009","issue_url":"https://api.github.com/repos/mhiramat/mincs/issues/10","id":266214009,"user":{"login":"mhiramat","id":560280,"avatar_url":"https://avatars.githubusercontent.com/u/560280?v=3","gravatar_id":"","url":"https://api.github.com/users/mhiramat","html_url":"https://github.com/mhiramat","followers_url":"https://api.github.com/users/mhiramat/followers","following_url":"https://api.github.com/users/mhiramat/following{/other_user}","gists_url":"https://api.github.com/users/mhiramat/gists{/gist_id}","starred_url":"https://api.github.com/users/mhiramat/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mhiramat/subscriptions","organizations_url":"https://api.github.com/users/mhiramat/orgs","repos_url":"https://api.github.com/users/mhiramat/repos","events_url":"https://api.github.com/users/mhiramat/events{/privacy}","received_events_url":"https://api.github.com/users/mhiramat/received_events","type":"User","site_admin":false},"created_at":"2016-12-10T14:53:20Z","updated_at":"2016-12-10T14:53:20Z","body":"See my [libcap](https://github.com/mhiramat/libcap) repository. I committed 2 patches which allow minc to execute given command directly from capsh."}}
{"actor":{"display_login":"mhiramat"}}