Messages in this thread | | | Date | Wed, 28 Jan 2015 00:35:32 +0300 | From | Cyrill Gorcunov <> | Subject | Re: [RFC][PATCH v2] procfs: Always expose /proc/<pid>/map_files/ and make it readable |
| |
On Tue, Jan 27, 2015 at 11:53:19AM -0800, Kees Cook wrote: > >> > >> Are mount namespaces handled in this output? > > > > Could you clarify this moment, i'm not sure i get it. > > I changed how I asked this question in my review of the documentation, > but it looks like these symlinks aren't "regular" symlinks (that are > up to the follower to have access to the file system path shown), but > rather they bypass VFS. As a result, I'm wondering how things like > mount namespaces might change this behavior: what is shown, the path > from the perspective of the target, or from the viewer (which may be > in separate mount namespaces).
I must admit I personally didn't investigating how mount namespaces might itercat with map-files. Pavel, could you share the thoughts?
| |