Messages in this thread | | | Date | Mon, 25 Apr 2005 09:22:10 +0200 | From | Jan Hudec <> | Subject | Re: [PATCH] private mounts |
| |
On Mon, Apr 25, 2005 at 08:00:20 +0200, Miklos Szeredi wrote: > > Much better is the proposal to make namespaces first-class objects, > > that can be switched to. Then users can choose to have themselves a > > namespace containing their private mounts, if they want it, with > > login/libpam or even a program run from .profile switching into it. > > It would be good if it could be done just in libpam. But that would > require every libpam user to call into it after the fork() or > whatever, so unshare() and join_namespace() don't mess up the server > running environment.
They do. The *HAVE* to do! The 'session' stage modifies the environment, so it must be done after the fork. So if it, in addition to environment, modifies namespace, it won't make a difference.
> If not, then it would mean modifying numerous programs, having these > modifications integrated, then having distributions pick up the > changes, etc. I would imagine quite a long cycle for this to be > acutally useful.
------------------------------------------------------------------------------- Jan 'Bulb' Hudec <bulb@ucw.cz> [unhandled content-type:application/pgp-signature] | |