Re: [CFT][PATCH 00/10] Making new mounts of proc and sysfs as safe as bind mounts (take 2)

Am 28.05.2015 um 23:07 schrieb Kenton Varda:

On Thu, May 28, 2015 at 1:47 PM, Richard Weinberger [off-list ref] wrote:

quoted

Am 28.05.2015 um 22:12 schrieb Kenton Varda:

quoted

We never mount sysfs in Sandstorm.

sysfs is ABI and applications depend on it.
Even glibc is using sysfs. Currently it has
fallback paths but these may go away...

Off-topic, but Sandstorm isn't intended to provide a full Linux ABI.
It is intended to provide a secure sandbox that can run apps that have
been explicitly ported to Sandstorm. More background if you're interested:

Ahh, the application needs to be Sandstorm aware.
I was missing that detail. Thanks for pointing that out!

Thanks,
//richard