tree 7479831cbd5c89caee6aeeed8bb2238c21a90e24
parent 0d1cbf6e88886378cd859a363747420b8fec8b4c
author Mike Frysinger <vapier@google.com> 1507615490 -0400
committer Treehugger Robot <treehugger-gerrit@google.com> 1508445899 +0000

allow bind mounts outside of chroots

If we're in a unique namespace, there's no reason to not allow bind
mounts.  These can be useful like when setting up a unique /dev, or
to make specific paths read-only for a daemon.

Bug: chromium:680859
Test: `sudo ./minijail0 -rvpd -b /dev/log,/dev/log /bin/logger asdf` works
Change-Id: I9dcb7f072dfdaee8b405e5d05e5d94ee999767e8