From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=0.0 required=5.0 tests=RCVD_IN_DNSWL_NONE autolearn=ham autolearn_force=no version=3.4.4 Received: (qmail 15275 invoked from network); 20 Dec 2020 20:34:35 -0000 Received: from ewsd.inri.net (107.191.116.128) by inbox.vuxu.org with ESMTPUTF8; 20 Dec 2020 20:34:35 -0000 Received: from mimir.eigenstate.org ([206.124.132.107]) by ewsd; Sun Dec 20 15:33:37 -0500 2020 Received: from abbatoir.fios-router.home (pool-74-101-2-6.nycmny.fios.verizon.net [74.101.2.6]) by mimir.eigenstate.org (OpenSMTPD) with ESMTPSA id 62a40330 (TLSv1.2:ECDHE-RSA-AES256-SHA:256:NO); Sun, 20 Dec 2020 12:33:27 -0800 (PST) Message-ID: To: 23hiro@gmail.com To: 9front@9front.org Date: Sun, 20 Dec 2020 12:33:25 -0800 From: ori@eigenstate.org MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit List-ID: <9front.9front.org> List-Help: X-Glyph: ➈ X-Bullshit: property-scale base-oriented interface-scale database Subject: Re: [9front] RFNOMNT vs unmount Reply-To: 9front@9front.org Precedence: bulk Quoth hiro <23hiro@gmail.com>: > > When trying to restrict a program, it seems common to > > bind /path/to/resource over /, and then calling > > 'rfork m'. > > really? i have never seen this on plan9. instead it seems like > something you would do on linux (with chroot). It's something done by tcp80 and ftpd, for example. But, you're right: it's not used nearly enough, considering that the system is designed around namespacing. Probably because glaring gaps like this make it less useful.