Re: [PATCH] private mounts

Miklos Szeredi
2005-04-30T17:08:33Z

> But you don't need a new system call to bind an fd.
>
> "mount --bind /proc/self/fd/N mount_point" works, try it.

Ahh, yes :)

Still proc_check_root() has to be relaxed, to allow dereferencing link
under a different namespace. Maybe the check should be skipped for
capable(CAP_SYS_ADMIN) or similar.

What do people think about that?

Miklos