All of lore.kernel.org
 help / color / mirror / Atom feed
From: "Serge E. Hallyn" <serge-A9i7LUbDfNHQT0dZR+AlfA@public.gmane.org>
To: Matt Helsley <matthltc-r/Jw6+rmf7HQT0dZR+AlfA@public.gmane.org>
Cc: containers-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org,
	akpm-de/tnXTf+JLsfHDXvbKv3WD2FQJk+8+b@public.gmane.org,
	Biederman Eric Biederman
	<ebiederm-aS9lmoZGLiVWk0Htik3J/w@public.gmane.org>
Subject: Re: [PATCH 2/2] Kconfig : default all the namespaces to 'yes'
Date: Tue, 12 Oct 2010 12:16:22 -0500	[thread overview]
Message-ID: <20101012171622.GA16543@hallyn.com> (raw)
In-Reply-To: <20101011185757.GJ23839-52DBMbEzqgQ/wnmkkaCWp/UQ3DHhIser@public.gmane.org>

Quoting Matt Helsley (matthltc-r/Jw6+rmf7HQT0dZR+AlfA@public.gmane.org):
> On Thu, Oct 07, 2010 at 03:15:33PM +0200, Daniel Lezcano wrote:
> > As the different namespaces depend on 'CONFIG_NAMESPACES', it is
> > logical to enable all the namespaces when we enable NAMESPACES.
> > 
> > Signed-off-by: Daniel Lezcano <daniel.lezcano-GANU6spQydw@public.gmane.org>
> 
> Subject of the patch email is a little confusing as it's not
> quite what happens. I'm mostly OK with it but I'm not sure we
> should enable user-ns by default just yet.
> 
> Acked-By: Matt Helsley <matthltc-r/Jw6+rmf7HQT0dZR+AlfA@public.gmane.org>

In fact, perhaps we should keep the experimental tag on user namespaces.
If/when I/someone returns to heavy hacking on user namespaces, the
changes will be very invasive.  (Of course then we get back to questions
of the usefulness of experimental tag)

In particular, when we start refusing access for certain accesses between
user namespaces, it might confuse userspace.

Definately Ack to the other two.

-serge

  parent reply	other threads:[~2010-10-12 17:16 UTC|newest]

Thread overview: 10+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2010-10-07 13:15 [PATCH 1/2] Kconfig : remove pid_ns and net_ns experimental Daniel Lezcano
     [not found] ` <1286457333-10500-1-git-send-email-daniel.lezcano-GANU6spQydw@public.gmane.org>
2010-10-07 13:15   ` [PATCH 2/2] Kconfig : default all the namespaces to 'yes' Daniel Lezcano
     [not found]     ` <1286457333-10500-2-git-send-email-daniel.lezcano-GANU6spQydw@public.gmane.org>
2010-10-11 18:57       ` Matt Helsley
     [not found]         ` <20101011185757.GJ23839-52DBMbEzqgQ/wnmkkaCWp/UQ3DHhIser@public.gmane.org>
2010-10-12 17:16           ` Serge E. Hallyn [this message]
     [not found]             ` <20101012171622.GA16543-A9i7LUbDfNHQT0dZR+AlfA@public.gmane.org>
2010-10-13  5:09               ` Daniel Lezcano
     [not found]                 ` <4CB53F1C.7020709-GANU6spQydw@public.gmane.org>
2010-10-13 14:44                   ` Serge E. Hallyn
     [not found]                     ` <20101013144430.GA20904-A9i7LUbDfNHQT0dZR+AlfA@public.gmane.org>
2010-10-14 23:51                       ` Andrew Morton
     [not found]                         ` <20101014165106.1ab36714.akpm-de/tnXTf+JLsfHDXvbKv3WD2FQJk+8+b@public.gmane.org>
2010-10-15  3:05                           ` Serge E. Hallyn
2010-10-12 17:53   ` [PATCH 1/2] Kconfig : remove pid_ns and net_ns experimental Oren Laadan
     [not found]     ` <4CB4A0B3.10401-eQaUEPhvms7ENvBUuze7eA@public.gmane.org>
2010-10-13  5:10       ` Daniel Lezcano

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20101012171622.GA16543@hallyn.com \
    --to=serge-a9i7lubdfnhqt0dzr+alfa@public.gmane.org \
    --cc=akpm-de/tnXTf+JLsfHDXvbKv3WD2FQJk+8+b@public.gmane.org \
    --cc=containers-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org \
    --cc=ebiederm-aS9lmoZGLiVWk0Htik3J/w@public.gmane.org \
    --cc=matthltc-r/Jw6+rmf7HQT0dZR+AlfA@public.gmane.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.