gVisor Sentry permits access to the renameat() syscall. As the sentry is not chrooted, it permits renaming files in the host system. Continue reading...
