Quoting Eric W. Biederman (ebiederm@xxxxxxxxxxxx): > > +This flag is intended for the implementation of control groups. > > The above sentence is wrong. > > +This flag is intended for the implementation of containers. > > Would be correct. > > Both control groups and namespaces feed into the user space container > concept. Control groups are multiprocess resource limits. > Namespaces are affect the mapping from resource name to resource. > > What is interesting is you can unshare a sysvipc namespace and still have > sysvipc shared memory mapped from another sysvipc namespace. > > This is something that needs to be watched for. Oh, I see, so please disregard my last msg, it seems Eric was plenty clear. thanks, -serge -- To unsubscribe from this list: send the line "unsubscribe linux-man" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html