lkml.org 
[lkml]   [2004]   [Oct]   [10]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [patch 2/3] lsm: add bsdjail module
    > Your filesystem handling code is completely superflous (and buggy).  Please
    > remove all the code dealing with chroot-lookalikes. In your userland script
    > you simpl have to clone(.., CLONE_NEWNS) to detach your namespace from your
    > parent, then you can lazly unmount all filesystems and setup your new namespace
    > before starting the jail. The added advantage is that you don't need any
    > cludges to keep the user from exiting the chroot.

    I definately would prefer to use namespaces. I had originally wanted to
    do a copy_namespace() in the module. That function is not exported,
    though. Is doing that in user-space really the right way to do it?

    thanks,
    -serge
    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2005-03-22 14:06    [from the cache]
    ©2003-2014 Jasper Spaans. hosted at Digital Ocean