Skip to content

docs: explain hardlink risks for writable binds - #818

Closed
sairex53 wants to merge 1 commit into
containers:mainfrom
sairex53:docs/813-hardlink-bind-warning
Closed

sairex53 wants to merge 1 commit into
containers:mainfrom
sairex53:docs/813-hardlink-bind-warning

Conversation

@sairex53

@sairex53 sairex53 commented Oct 12, 2026 •

Copy link
Copy Markdown

Document that a process outside the sandbox can create a hard link in a writable bind mount, allowing writes inside the sandbox to modify the host file. Recommend a separate filesystem when writable data must be isolated.

Addresses #813.

Validation: git diff --check.

Signed-off-by: Eduard Zateev <hackerowskiy@gmail.com>
@sairex53
sairex53 force-pushed the docs/813-hardlink-bind-warning branch from da838c1 to 0997abc Compare October 12, 2026 11:01
@rusty-snake

Copy link
Copy Markdown
Contributor

Duplicate of #816 ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants