David Howells <dhowells@xxxxxxxxxx> wrote: > > A user namespace should be taken from a pidns for which a procfs is created. > > That would seem wrong. Shouldn't the superblock user_ns be from the mounter? Ah, no. The change is correct. What the patch description doesn't mention is that this is when a new pid namespace is setting up its own proc filesystem. I'll change the subject and patch body to: proc: Set correct userns for new proc super created by a new pid_namespace Fix the setting up a new proc superblock for a new pid_namespace such that the user_ns for that proc superblock needs to be taken from the new pid_namespace and not the active process. which I think describes it better. David