On Fri, 2010-12-10 at 15:06 +0000, Daniel P. Berrange wrote: > Adding CLONE_NEWPID would be worthwhile to stop the > mock process seeing any other PIDs on the machine. It's critical, or mock could ptrace some process running as root on the host and inject arbitrary code. -- Matt