Messages in this thread | | | Date | Mon, 09 Mar 2015 19:36:12 -0700 | From | Dave Hansen <> | Subject | Re: [RFC, PATCH] pagemap: do not leak physical addresses to non-privileged userspace |
| |
On 03/09/2015 05:19 PM, Andy Lutomirski wrote: > per-pidns like this is no good. You shouldn't be able to create a > non-paranoid pidns if your parent is paranoid.
That sounds like a reasonable addition that shouldn't be hard to add.
> Also, at some point we need actual per-ns controls. This mount option > stuff is hideous.
So,
per-pidns == bad per-ns == good
If the pid namespace is the wrong place, which namespace is the right place?
| |