Removing binary sysctl
Posted Dec 10, 2009 10:02 UTC (Thu) by
michich (subscriber, #17902)
In reply to:
Removing binary sysctl by wahern
Parent article:
Removing binary sysctl
Indeed, the mere existence of /proc outside the chroot has its own problems, like exposing file descriptors--pipes, socketpairs--that would otherwise be unaddressable by other processes.
Would this solve your concern?:
mount --bind /proc/sys/kernel/random /some/dir/inside/your/chroot
(
Log in to post comments)