On Sat, 2023-06-03 at 17:32 -0700, John Johansen wrote: > mount, # allow all mount operations > pivot_root, # allow all pivot roots > umount, # allow unmounting > > you can then carve out specific rules if you need to with deny rules. >
Thanks so much, that did exactly what I needed!