I'd like to note that `mount -obind --make-private` is not atomic and implemented internally as
  mount -o bind $src $target # 1
  mount --make-private $target # 2
So, if two mounts are executed in parallel, there are (much smaller) racing window between them.

(FWIW, I just run pbuilders inside mount/uts/ipc/pid namespace, so that they cannot affect each other or host system)

Reply via email to