Hacker News Reader

If it is running as root, can't it just manipulate its mount namespace at will? Mount devtmpfs, then mount user partitions.

I believe one can use "capabilities" and seccomp to lock down a superuser process.

Systemd can put it in its own namespaces, like a container