Messages in this thread | | | Date | Thu, 16 Sep 2004 16:10:08 +0200 | From | Herbert Poetzl <> | Subject | Re: [patch] kernel sysfs events layer |
| |
On Wed, Sep 15, 2004 at 09:08:21PM -0700, Greg KH wrote: > On Thu, Sep 16, 2004 at 03:21:04AM +0200, Herbert Poetzl wrote: > > On Wed, Sep 15, 2004 at 05:38:39PM -0400, Robert Love wrote: > > > On Wed, 2004-09-15 at 14:34 -0700, Tim Hockin wrote: > > > > > > > It's a can of worms, is what it is. And I'm not sure what a good fix > > > > would be. Would it just be enough to send a generic "mount-table changed" > > > > event, and let userspace figure out the rest? > > > > > > "Can of worms" is a tough description for something that there is no > > > practical security issue for, just a lot of hand waving. No one even > > > uses name spaces. > > > > ah, sorry, that is wrong, we (linux-vserver) > > _do_ use namespaces extensively, and probably > > other 'jail' solutions will use it too ... > > Great. > So, how do you handle the /sbin/hotplug call today?
most of the time, not at all, but if, then in the 'initial' namespace where other userspace helpers are handled too (means on the host)
> How would you want to handle this kevent notifier?
if there was a notifier telling about mounts - real and virtual - then they would make sense _inside_ the respective namespace they happen .. e.g.
usb-device attached: helper is called on host, and does some stuff result is a mount of some device, which happens on the host/initial namespace, notifier happens there ...
process in namespace does --bind mount: this might be interesting for the host too, but probably it is more useful for the namespace where it happened ...
but keep in mind, that might not be true for the usual, we put our sendmail in a separate namespace
best, Herbert
> thanks, > > greg k-h > - > To unsubscribe from this list: send the line "unsubscribe linux-kernel" in > the body of a message to majordomo@vger.kernel.org > More majordomo info at http://vger.kernel.org/majordomo-info.html > Please read the FAQ at http://www.tux.org/lkml/ - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |