Thanks, Eric. While this approach has limitations and administrative overhead which I'd prefer it didn't, it also has huge benefits, especially faster id comparisons and, most importantly, type safety enforcing that the right kinds of uids are compared. So I endorse this approach. I've reviewed and acked many of the patches, some I still had questions on, but the approach as a whole gets an ack from me. thanks, -serge _______________________________________________ Containers mailing list Containers@xxxxxxxxxxxxxxxxxxxxxxxxxx https://lists.linuxfoundation.org/mailman/listinfo/containers