On Mon, 3 Jul 2023 10:17:06 -0400 =?UTF-8?B?SsOpcsO0bWUgQ2hhcmFvdWk=?=
<jer...@riseup.net> wrote:
Hello,
I'm using this patch on two different servers, and have not encountered
any issues.
I'm running with chroot'ed pools, and relatively complex/common
applications like Drupal, Wordpress and Nextcloud.
So it seems I wasn't doing my tests correctly and the patch does indeed
need adjustment to work with chroot'ed pools:
Add the CAP_SYS_CHROOT capability and "chroot" to the system call filter.
-- Jérôme