> Quoting David Newall (
david@davidnewall.com):
>
>> Serge E. Hallyn wrote:
>>
>>> Quoting David Newall (
david@davidnewall.com):
>>>
>>>
>>>> It might be tidy if pivot_root could be used (instead of a hack based on
>>>> a chroot bug), but it'd still be unportable.
>>>>
>>>>
>>> It can.
>>>
>>> Please re-read my previous msg.
>>>
>> I read it. Currently pivot_root can't be used to affect a single process.
>>
>
> No. If you unshare your mounts namespace immediately before pivot_root,
> then pivot_root will only affect that single process.
>