linux-only jail possible?

[Alexander Leidinger]

On Sun, 7 Mar 2010 11:44:37 +0100 Ed Schouten <ed at 80386.nl> wrote:

> * Alexander Leidinger <Alexander at Leidinger.net> wrote:
> > On Sat, 6 Mar 2010 19:15:12 +0100 Ed Schouten <ed at 80386.nl> wrote:
> > 
> > > I am still in doubt what to do. Maybe we could consider
> > > committing a patch like this:
> > [...]
> > > This is a bit more complete. What it does, is that it creates a
> > > symlink from /proc/%d/fd to /dev/fd, only if the calling process
> > > matches. Then when you mount fdescfs on /dev/fd, it also does the
> > > right thing, because it will always readlink() on a character
> > > device, which also returns an error code.
> > > 
> > > Comments, suggestions anyone?
> > 
> > Looks better than the one before. :)
> 
> Great. Just committed it to SVN:

Note: I didn't test it. I just think it is better than a hack, but we
need to change the instructions how to have a full linux env...

Bye,
Alexander.