I think in linux you could already do this if you wanted to. unprivileged user namespace + mount namespace -> mount some tmpfs, bind-mount (optionally read-only or noexec), pivot_root and you got an isolated view of the…
I assume that is intended as a security feature to prevent TOCTTOU bugs, especially when a process does not use the *at family of syscalls. I.e. a malicious process can't swap directories under your nose.
I think in linux you could already do this if you wanted to. unprivileged user namespace + mount namespace -> mount some tmpfs, bind-mount (optionally read-only or noexec), pivot_root and you got an isolated view of the…
I assume that is intended as a security feature to prevent TOCTTOU bugs, especially when a process does not use the *at family of syscalls. I.e. a malicious process can't swap directories under your nose.