Removing binary sysctl
Posted Dec 10, 2009 10:02 UTC (Thu) by michich
In reply to: Removing binary sysctl
Parent article: Removing binary sysctl
Indeed, the mere existence of /proc outside the chroot has its own problems, like exposing file descriptors--pipes, socketpairs--that would otherwise be unaddressable by other processes.
Would this solve your concern?:
mount --bind /proc/sys/kernel/random /some/dir/inside/your/chroot
to post comments)