Messages in this thread | | | Date | Wed, 4 Apr 2018 20:49:09 +0300 | From | Alexey Dobriyan <> | Subject | Re: [PATCH] [RFC][WIP] namespace.c: Allow some unprivileged proc mounts when not fully visible |
| |
> The only option I have seen proposed that might qualify as something > general purpose and simple is a new filesystem that is just the process > directories of proc.
While "mount -t pid" and "mount -t sysctl" are decades overdue, I don't think they cover everything.
IIRC some gcc versions read /proc/meminfo on every invocation. Now imagine such program doesn't have a fallback if /proc/ doesn't exist (how many thousands such programs are there?) So user is going to ask for /proc with just /proc/meminfo only. At this point it is back to nearly full /proc.
| |