[lkml]   [2005]   [May]   [11]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [RCF] [PATCH] unprivileged mount/umount
    Bodo Eggert <> wrote:
    > > How about a new clone option "CLONE_NOSUID"?
    > IMO, the clone call ist the wrong place to create namespaces. It should be
    > deprecated by a mkdir/chdir-like interface.

    And the mkdir/chdir interface already exists, see "cd /proc/NNN/root".

    There are some small quirks to fix, should we decide that's the way to
    go. But it's basically there.

    File descriptors keep track of the namespace (actually vfsmnt) where
    they were opened. Today, if you pass a directory file descriptor from
    one process to another, you're granting access to see the other's

    That's why /proc/NNN/root works (with small fixes) in much the way
    you'd expect.

    -- Jamie
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    More majordomo info at
    Please read the FAQ at

     \ /
      Last update: 2005-05-11 19:19    [W:0.020 / U:13.696 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site