Neil Horman <nhorman@xxxxxxxxxxxxx> writes: > As its currently implemented, redirection of core dumps to a pipe reader should > be executed such that the reader runs in the namespace of the crashing process, > and it currently does not. This is the only sane way to deal with namespaces > properly it seems to me, and this patch implements that functionality. I actually rather strongly disagree. While we have a global core dump pattern core dumps to a a pipe reader should be executed such that the reader runs in the namespace of the process that set the pattern. We can easily restrict that to the initial namespaces to make the implementation simpler. If you want to play namespace games you can implement all of those in user space once my tree merges for v3.8. I am really not a fan of the trigger process being able to control the environment of a privileged process. It makes writing the privileged process much trickier. Eric _______________________________________________ Containers mailing list Containers@xxxxxxxxxxxxxxxxxxxxxxxxxx https://lists.linuxfoundation.org/mailman/listinfo/containers
