Re: [lxc-devel] conceptual questions about user namespaces

2013-04-12 Thread Serge Hallyn
Quoting Guido Jäkel (g.jae...@dnb.de): > First i want to to say that i didn't test this feature by myself up to now. > But from reading the list, i have questions. > > For me, the main usecases of the user namespace feature seems to be: > > a) to "shift" the containers root user - a security dri

[lxc-devel] conceptual questions about user namespaces

2013-04-11 Thread Guido Jäkel
First i want to to say that i didn't test this feature by myself up to now. But from reading the list, i have questions. For me, the main usecases of the user namespace feature seems to be: a) to "shift" the containers root user - a security driven term ("jailbreaking") b) to "shift" the contain