The day will come when I’ll have to dig up why every process can interact with every other process’s file descriptors by means of /proc/$pid/fd on Linux (if it’s the same user). Is there a legitimate reason for that … ? (I know about hidepid, but that doesn’t help here.)

This is why the PID Namespace controller exists in Linux 👌

@prologic@twtxt.net Hmm. That would require me to put each and every process into its own namespace, wouldn’t it? I don’t think that’s practical. 🤔 Or maybe I’m misunderstanding.

I’ve never really thought about this, to be honest. There’s no procfs on the BSDs, so I guess that a) it’s not really necessary, b) there should be plenty of rants from BSD users on this issue that I could read. 😅

@movq@www.uninformativ.de Yes but this is easy with unshare

@prologic@twtxt.net Hmm, I’ll have to look into it. 🤔 Probably not what I meant, but interesting nontheless. 👍