From mboxrd@z Thu Jan 1 00:00:00 1970 From: David Howells Subject: Re: [PATCH 0/3] keys: play nicely with user namespaces Date: Fri, 19 Dec 2008 11:17:42 +0000 Message-ID: <10350.1229685462@redhat.com> References: <20081219014555.GA25688@us.ibm.com> <20081218174613.GA13968@us.ibm.com> <20081217235536.GA932@us.ibm.com> <20081212141707.GB9571@us.ibm.com> <20081211232323.GA8343@us.ibm.com> <3507.1229086294@redhat.com> <25987.1229097458@redhat.com> <3547.1229607983@redhat.com> <7376.1229648192@redhat.com> <7658.1229653824@redhat.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: containers-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org Errors-To: containers-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org To: "Eric W. Biederman" Cc: dhowells-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org, Linux Containers List-Id: containers.vger.kernel.org Eric W. Biederman wrote: > So far the design is that user namespaces are disjoint with one specific > exception. > > The user who creates the user namespace is expected to have god like powers > over all users in the created user namespace. I see. > When carefully implemented will allow a user namespace to be created with > normal user permissions and for the user that created user namespace to > manage the resources owned by users in that user namespace. I'm not sure how to deal with this wrt keys. There are two problems to consider: (1) Should a key with UID 500 from namespace A in Serge's example be visible in namespace B? If such a key should show up in namespace B, should its UID be given as 0 to userspace? (2) How is the quota controlled? Do new keys made up under the domain of namespace B go to namespace B UID 0's quota? Or do they come out of namespace A's UID 500 quota? David