At Tue, 1 Jun 2021 14:00:50 -0400 (EDT), Mouse <mouse%Rodents-Montreal.ORG@localhost> wrote: Subject: Re: Devices. > > Uh, maybe _you_ do. _I_ don't. For most of my chroots, I want the > chroot to have as minimal a set of devices as still allows it to do its > job, and in particular I do not want it to ever dynamically acquire new > devices, nor do I want it to have /dev entries for devices not > necessary for its task. I not infrequently want unusual ownerships or > permissions on its /dev, too. Indeed. Very important! > I also want to be able to have device nodes places other than /dev, and > that desire is at least mostly orthogonal to chroot. I'm less convinced of this part though.... This ability has brought more complexity (e.g. mount options to disable devices per filesystem) than I've ever seen pay off in benefit. -- Greg A. Woods <gwoods%acm.org@localhost> Kelowna, BC +1 250 762-7675 RoboHack <woods%robohack.ca@localhost> Planix, Inc. <woods%planix.com@localhost> Avoncote Farms <woods%avoncote.ca@localhost>
Attachment:
pgpEio8DZsLtP.pgp
Description: OpenPGP Digital Signature