![]() | |||||||||||
Messages in this thread |
> yes done. enclosed the patch. > > But seems like this patch opens up questions like: > > Should mounts/umounts/remounts/pivot_root in foreign namespaces > be allowed? I think yes. Moving a subtree to a different namespace is a bit tricky so maybe move should still be restricted to be within a single namespace. And I think we should relax the checks under /proc, to allow proper access to foreign namespaces as far as it doesn't impact security. E.g. it makes sense to allow a process to access /proc/self/fd/XXX even if XXX resides in a different namespace. Currently that is not allowed. Miklos - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/ | ||||||||||
| Last update: 2005-05-23 10:28 [from the cache] ©2003-2008 | |||||||||||