Re: TOMOYO Linux Security Goal

[Tetsuo Handa]

Hello.

Serge E. Hallyn wrote:
> > Does a process get different mount trees by just calling clone() or unshare()?
> > My understanding is that clone() or unshare() disables propergation of
> > mount tree changes when somebody calls mount() or umount() or pivot_root().
> 
> Yes, with further propagation rules possible.
> 
Excuse me. To which statement did you say "yes"?

Does clone() or unshare() change visible directories without
calling following mount()/umount()/pivot_root()?

Regards.
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/