From: Michael Tremer Date: Fri, 24 Nov 2023 15:35:29 +0000 (+0000) Subject: mount: Add comment about mounting /proc X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=0d9e0714fd7cb55e912462c52994533eef6c490a;p=people%2Fms%2Fpakfire.git mount: Add comment about mounting /proc Signed-off-by: Michael Tremer --- diff --git a/src/libpakfire/mount.c b/src/libpakfire/mount.c index 3ee09aa76..4c0cbcb67 100644 --- a/src/libpakfire/mount.c +++ b/src/libpakfire/mount.c @@ -53,6 +53,11 @@ static const struct pakfire_mountpoint { NULL, }, + /* + XXX it is kind of problematic to mount /proc twice as a process inside the + jail can umount /proc and will then see the host's /proc. + */ + // Make /proc/sys read-only (except /proc/sys/net) { PAKFIRE_MNTNS_INNER,