Container user have root access to the host machine

[nos1dot618]

[nos1dot618]

Can be solved using unshare syscall with CLONE_NEWUSER flag; but doing this causes error 2 - Operation not permitted.

if (unshare(CLONE_NEWUSER | CLONE_NEWNS | CLONE_NEWPID | CLONE_NEWUTS) != 0) Error(Module, "unshare failed");
printf("[INF] %s: isolated namespace from host\n", Module);