Quoting Matt Helsley (matthltc@xxxxxxxxxx): > On Thu, Oct 07, 2010 at 03:15:33PM +0200, Daniel Lezcano wrote: > > As the different namespaces depend on 'CONFIG_NAMESPACES', it is > > logical to enable all the namespaces when we enable NAMESPACES. > > > > Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxx> > > Subject of the patch email is a little confusing as it's not > quite what happens. I'm mostly OK with it but I'm not sure we > should enable user-ns by default just yet. > > Acked-By: Matt Helsley <matthltc@xxxxxxxxxx> In fact, perhaps we should keep the experimental tag on user namespaces. If/when I/someone returns to heavy hacking on user namespaces, the changes will be very invasive. (Of course then we get back to questions of the usefulness of experimental tag) In particular, when we start refusing access for certain accesses between user namespaces, it might confuse userspace. Definately Ack to the other two. -serge _______________________________________________ Containers mailing list Containers@xxxxxxxxxxxxxxxxxxxxxxxxxx https://lists.linux-foundation.org/mailman/listinfo/containers
