LWN.net Logo

Removing binary sysctl

Removing binary sysctl

Posted Dec 10, 2009 10:02 UTC (Thu) by michich (subscriber, #17902)
In reply to: Removing binary sysctl by wahern
Parent article: Removing binary sysctl

Indeed, the mere existence of /proc outside the chroot has its own problems, like exposing file descriptors--pipes, socketpairs--that would otherwise be unaddressable by other processes.
Would this solve your concern?: mount --bind /proc/sys/kernel/random /some/dir/inside/your/chroot


(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds