Re: [PATCH 3/4] proc: Point /proc/net at /proc/thread-self/net instead of /proc/self/net

From: Linus Torvalds
Date: Thu Sep 29 2022 - 17:29:31 EST


On Thu, Sep 29, 2022 at 2:15 PM Al Viro <viro@xxxxxxxxxxxxxxxxxx> wrote:
>
> FWIW, what e.g. debian profile for dhclient has is
> @{PROC}/@{pid}/net/dev r,
>
> Note that it's not
> @{PROC}/net/dev r,

Argh. Yeah, then a bind mount or a hardlink won't work either, you're
right. I was assuming that any Apparmor rules allowed for just
/proc/net.

Oh well. I guess we're screwed any which way we turn.

Linus