On Fri, 2010-12-10 at 15:06 +0000, Daniel P. Berrange wrote: > Adding CLONE_NEWPID would be worthwhile to stop the > mock process seeing any other PIDs on the machine.
It's critical, or mock could ptrace some process running as root on the host and inject arbitrary code. -- Matt -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel
