Thanks for the detailed explanation. That’s the solution.
In addition to your solution, I’ve also tried to set the restricted.devices.disk.paths
line of the project configuration to an empty string ""
, and it worked too.
- restricted.devices.disk.paths: /home/xxx
+ restricted.devices.disk.paths: ""
For those who are having the same problem and have ended up here, I’d also suggest reading this to help you avoid a potential root exploit.