lkml.org 
[lkml]   [2005]   [May]   [11]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [RCF] [PATCH] unprivileged mount/umount
    Bodo Eggert <harvested.in.lkml@posting.7eggert.dyndns.org> wrote:
    > > How about a new clone option "CLONE_NOSUID"?
    >
    > IMO, the clone call ist the wrong place to create namespaces. It should be
    > deprecated by a mkdir/chdir-like interface.

    And the mkdir/chdir interface already exists, see "cd /proc/NNN/root".

    There are some small quirks to fix, should we decide that's the way to
    go. But it's basically there.

    File descriptors keep track of the namespace (actually vfsmnt) where
    they were opened. Today, if you pass a directory file descriptor from
    one process to another, you're granting access to see the other's
    namespace.

    That's why /proc/NNN/root works (with small fixes) in much the way
    you'd expect.

    -- Jamie
    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2005-05-11 19:19    [W:0.037 / U:30.432 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site