[Bug 272706] procstat(1): procstat vm in jails shows host paths of binaries and shared libraries from outside prison

From: <bugzilla-noreply_at_freebsd.org>
Date: Tue, 25 Jul 2023 15:08:02 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=272706

--- Comment #4 from Andrew "RhodiumToad" Gierth <andrew@tao11.riddles.org.uk> ---
(In reply to Andrew "RhodiumToad" Gierth from comment #3)

I think I figured this one out, it happens when nullmounts are involved, even
if the jail's root directory is not itself the mountpoint of a nullmount.

e.g.

mkdir /some/dir
mount -t nullfs /path/to/real/jail/tree /some/dir
jail -c path=/some/dir/somejail

at this point, executing procstat (or possibly other vn_fullpath clients)
inside the jail returns paths based on /path/to/real/jail/tree/somejail (and
not /some/dir/somejail).

-- 
You are receiving this mail because:
You are the assignee for the bug.