Messages in this thread | | | Subject | Re: [PATCH 0/9] namespaces: Introduction | From | (Eric W. Biederman) | Date | Mon, 22 May 2006 10:54:11 -0600 |
| |
Yep. I bungle my description pretty badly.
The key points. - Simply messing with pid == 1 is not enough, you need to filter which pids are accessible. - pid isolation by permission checks and pid isolation via pid visibility are competing implementations. - pid isolation by permission checks (except for the pid == 1 case) can currently be implemented with a security module.
Eric - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |