Re: [PATCH 2/2] unshare: allow persisting namespaces

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, Jan 06, 2015 at 11:11:49AM -0600, Eric W. Biederman wrote:
> No.  An empty pid namespace is valid.   An empty pid namespace is one
> in which an init process has not entered the pid namespace, or one in

but if I create a PID namespace (unshare/clone) then then I'm the init
process.... how I can create empty PID namespace (from userspace)?

> which the init process has exited (and thus no more processes are
> allowed).

yes, this makes sense

> So an empty pid namespace is a little weird but valid.
> 
> The implementation details of the patch completely baffle me.  I can't
> see a reason for things being implemented with clone for example.

Yes, this part of the patch is strange, but I like the basic idea
of the patch -- so make it possible to create an empty namespace and 
then later enter by nsenter.

    Karel

-- 
 Karel Zak  <kzak@xxxxxxxxxx>
 http://karelzak.blogspot.com
--
To unsubscribe from this list: send the line "unsubscribe util-linux" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Netdev]     [Ethernet Bridging]     [Linux Wireless]     [Kernel Newbies]     [Security]     [Linux for Hams]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux Admin]     [Samba]

  Powered by Linux