Has anyone looked if something similar to inoti.fyi applies to us?

you'd probably want danmcd, andyf, etc.

but I don't know of anyone checking

richlowe: is there any update explaining the bit that needed fixing w/ the sysroot change? (as I look at it).. i think I understand what happened, but can be nice to compare to see if I'm right or not

jbk: I need to write that somewhere, I haven't yet, it was going to be in the email to the list but I haven't sent that yet

jbk: I'm hoping I can get deeper test builds with it, this time

is it ready? I saw the gerrit email, if you'd prefer i wait if you still have some stuff that's fine as well...

i was flying back from maryland yesterday, so just saw it before i left

jbk: it works and passes the new tests etc, I was hoping the omnios folks at least could bulk build with it

jbk: I was going to send email, etc, probably monday

I tried this inoti.fyi script in an LX zone, the behaviour is as described

oh, I didn't think of LX zones 'cos they aren't in illumos-gate, I was thinking about fem

it could be another vector, yeah

seems like it works as well. `fswatch -m fen_monitor ...` in a `joyent` zone shows events for an unreadable to a user file (in its parlance 'fen' refers to Solaris/illumos _File Events Notification_ API)

(ie port_associate(3c) / port_get(3c) )

you should report that to security@, I think

that would be my first... but yeah, I'll do it now