lkml.org 
[lkml]   [2001]   [Feb]   [28]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH][CFT] per-process namespaces for Linux


    On Wed, 28 Feb 2001, Albert D. Cahalan wrote:

    > Alexander Viro writes:
    >
    > > * CLONE_NEWNS is made root-only (CAP_SYS_ADMIN, actually)
    >
    > Would an unprivileged version that killed setuid be OK to have?

    Not until we get decent resource accounting here.

    > Evil idea of the day: non-directory (even non-existant) mount points and
    > non-directory mounts. So then "mount --bind /etc/foo /dev/bar" works.

    Try it. It _does_ work.

    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2005-03-22 13:28    [W:0.023 / U:0.048 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site