Hi, yesterday, while testing the ns/clone tool in Jehanne, I realized that rfork(RFCNAMEG) does not touch the process dot. This means that the process can still access the files and folders on the device serving the dot, even if such device is not reachable anymore in the new namespace.
I wonder if this is an intended feature or a security issue. If it is an intended feature can you provide an usage example? Giacomo
