5 ms·
Sorry I don't quite grok your comment. It sounds like a bind mount so I'm unsure how it relates to unveil or chroot?
by gbrown_ 6y ago
Sorry I don't quite grok your comment. It sounds like a bind mount so I'm unsure how it relates to unveil or chroot?
- ori_b 6y agoChroot is more or less a bind mount over /. Bind mounts generalize chroot. Unveil does not, and therefore does not allow you to provide arbitrary views of the file system. It's useful for other reasons. On OpenBSD, a full web browser compromise does not lead to full file system access.