/am-i-contained

Primary LanguageC

Am I contained

The aim of this code is to detect whether we are running inside of a pid namespace that's not root. It does not check for any other namespaces or cgroups. To do this, permission to load BPF programs is required.

Build and run

make && sudo ./main-static # should not panic
sudo unshare --fork --pid --mount-proc
sudo ./main-static # should panic

Acknowledgements

Most of this code comes from the libbpfgo repository.