#!/bin/sh
# DF-2952 run (see VERDICT.md for preconditions)
cd "$(dirname "$0")"
as root: resident -f /tmp/df2952/victim with DF2952_SECRET_* marker env; then: su -m nobody -c 'env -i /tmp/df2952/victim leakcheck'