Re: [PATCH -mm 0/8] user ns: Introduction

2007-01-04 Thread Serge E. Hallyn
Quoting Serge E. Hallyn ([EMAIL PROTECTED]): > Quoting Andrew Morton ([EMAIL PROTECTED]): > > On Thu, 4 Jan 2007 12:06:35 -0600 > > "Serge E. Hallyn" <[EMAIL PROTECTED]> wrote: > > > > > This patchset adds a user namespace, which allows a process to > > > unshare its user_struct table, allowing fo

Re: [PATCH -mm 0/8] user ns: Introduction

2007-01-04 Thread Serge E. Hallyn
Quoting Andrew Morton ([EMAIL PROTECTED]): > On Thu, 4 Jan 2007 12:06:35 -0600 > "Serge E. Hallyn" <[EMAIL PROTECTED]> wrote: > > > This patchset adds a user namespace, which allows a process to > > unshare its user_struct table, allowing for separate accounting > > per user namespace. > > With

Re: [PATCH -mm 0/8] user ns: Introduction

2007-01-04 Thread Andrew Morton
On Thu, 4 Jan 2007 12:06:35 -0600 "Serge E. Hallyn" <[EMAIL PROTECTED]> wrote: > This patchset adds a user namespace, which allows a process to > unshare its user_struct table, allowing for separate accounting > per user namespace. With these patches applied and with CONFIG_USER_NS=n, my selinux

[PATCH -mm 0/8] user ns: Introduction

2007-01-04 Thread Serge E. Hallyn
This patchset adds a user namespace, which allows a process to unshare its user_struct table, allowing for separate accounting per user namespace. It appends a user namespace to vfsmounts and fown_structs, so that uid1==uid2 checks can be extended to be false if uid1 and uid2 are in different nam