Hello,

On Sun, Apr 18, 2010 at 04:27:28AM +0200, olafbuddenha...@gmx.net wrote:
> 
> Nah, I think you are right. Systems that provide private namespaces
> (beyond chroot) -- which most notably includes Plan9, but also Linux
> nowadays -- do so per-process rather than per-user. So a user gets a
> private namespace by means of it being assigned to the login shell (and
> inherited to all other processes), rather than directly to any process
> currently using that UID.

Ah, yes.  I think this was in the back of my mind when I objected,
but it just didn't get out.  ;-)

> Presently we don't have any mechanisms for server-side per-process
> handling though. (Again, beyond chroot.) While at some point we
> mentioned the possibility of introducing one, by allowing clients to
> give their PID voluntarily (no idea in what context we mentioned this),

We discussed this as a means to implement /proc/self.

> I'm still not convinced that this is a good idea in general. Private
> namespaces always make things somewhat intransparent IMHO.

I agree, unless perhaps it is obviously private, e.g. /proc/self.

Regards,
  Fredrik


Reply via email to