i don’t know if this is the right place to ask this question. are device inodes isolated in some way? i do not see them in 7 kinds of namespaces. while it would be possible to set up specific device inode files (in /dev), what kind of isolation exists in systems that dynamically build /dev?