On 2013-06-03 13:03, Holger Levsen wrote: > well, there are certain known bind mounts (eg /dev, /home or /var/cache/apt) > which we know we absolutly don't want and error+exit if we find those.
+1 + /tmp (piuparts uses /tmp/scripts and maybe more) and /, /usr, /etc, ... where to stop? while it may appear tempting, we shouldn't make these prefix patterns (while we might want to forbid /home/$LOGNAME, we should allow /home/$LOGNAME/work/debian/foo/scratch-repo4) > Or we can always exit when we find bind mounts which we didnt explicitly > allow. NACK. Would break --bindmounts /tmp/repo --testdebs-repo /tmp/repo Or maybe good idea. What would you whitelist? Andreas -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
