#!/bin/sh

exec bwrap \
    --bind / / \
    --dev-bind /dev /dev \
    --ro-bind /etc/microsoft-identity-broker/lsb-release /etc/lsb-release \
    --ro-bind /etc/microsoft-identity-broker/os-release /etc/os-release \
    --ro-bind /etc/pam.d/system-auth /etc/pam.d/common-password \
    -- \
    /opt/microsoft/intune/libexec/"${0##*/}" "${@}"