Re: [CFT][PATCH 00/10] Making new mounts of proc and sysfs as safe as bind mounts (take 2)
From: Kenton Varda <hidden>
Date: 2015-05-28 21:08:09
Also in:
linux-fsdevel
On Thu, May 28, 2015 at 1:47 PM, Richard Weinberger [off-list ref] wrote:
Am 28.05.2015 um 22:12 schrieb Kenton Varda:quoted
We never mount sysfs in Sandstorm.sysfs is ABI and applications depend on it. Even glibc is using sysfs. Currently it has fallback paths but these may go away...
Off-topic, but Sandstorm isn't intended to provide a full Linux ABI. It is intended to provide a secure sandbox that can run apps that have been explicitly ported to Sandstorm. More background if you're interested: https://github.com/sandstorm-io/sandstorm/wiki/Security-Practices-Overview#server-sandboxing https://blog.sandstorm.io/news/2014-08-13-sandbox-security.html -Kenton