Oleg assuming I am not blind these patches should fix the issues you spotted in the pid namespace as well as one additional one that I found during testing. Anyone with an extra set of eyeballs that wants to look over this code and double check to make certain I am not doing something stupid would be welcome. These patches are against 3.8-rc1 and I hope to get the into linux-next and on to Linus shortly. Eric W. Biederman (3): pidns: Outlaw thread creation after unshare(CLONE_NEWPID) pidns: Stop pid allocation when init dies proc: Allow proc_free_inum to be called from any context fs/proc/generic.c | 13 +++++++------ include/linux/pid.h | 1 + include/linux/pid_namespace.h | 4 +++- kernel/fork.c | 8 ++++++++ kernel/pid.c | 13 ++++++++++--- kernel/pid_namespace.c | 4 ++++ 6 files changed, 33 insertions(+), 10 deletions(-) _______________________________________________ Containers mailing list Containers@xxxxxxxxxxxxxxxxxxxxxxxxxx https://lists.linuxfoundation.org/mailman/listinfo/containers