From 0d9e0714fd7cb55e912462c52994533eef6c490a Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Fri, 24 Nov 2023 15:35:29 +0000 Subject: [PATCH] mount: Add comment about mounting /proc Signed-off-by: Michael Tremer --- src/libpakfire/mount.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/src/libpakfire/mount.c b/src/libpakfire/mount.c index 3ee09aa7..4c0cbcb6 100644 --- a/src/libpakfire/mount.c +++ b/src/libpakfire/mount.c @@ -53,6 +53,11 @@ static const struct pakfire_mountpoint { NULL, }, + /* + XXX it is kind of problematic to mount /proc twice as a process inside the + jail can umount /proc and will then see the host's /proc. + */ + // Make /proc/sys read-only (except /proc/sys/net) { PAKFIRE_MNTNS_INNER, -- 2.39.2