From mboxrd@z Thu Jan 1 00:00:00 1970 From: Gao feng Subject: Re: [PATCH 09/11] pidns: Add setns support Date: Mon, 19 Nov 2012 17:11:58 +0800 Message-ID: <50A9F7DE.60807@cn.fujitsu.com> References: <8739097bkk.fsf@xmission.com> <1353083750-3621-1-git-send-email-ebiederm@xmission.com> <1353083750-3621-9-git-send-email-ebiederm@xmission.com> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: In-Reply-To: <1353083750-3621-9-git-send-email-ebiederm-aS9lmoZGLiVWk0Htik3J/w@public.gmane.org> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: containers-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org Errors-To: containers-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org To: "Eric W. Biederman" Cc: Linux Containers , linux-kernel-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, Andrew Morton , Oleg Nesterov List-Id: containers.vger.kernel.org 5LqOIDIwMTLlubQxMeaciDE35pelIDAwOjM1LCBFcmljIFcuIEJpZWRlcm1hbiDlhpnpgZM6Cj4g RnJvbTogIkVyaWMgVy4gQmllZGVybWFuIiA8ZWJpZWRlcm1AeG1pc3Npb24uY29tPgo+IAo+IC0g UGlkIG5hbWVzcGFjZXMgYXJlIGRlc2lnbmVkIHRvIGJlIGluZXNjYXBhYmxlIHNvIHZlcmlmeSB0 aGF0IHRoZQo+ICAgcGFzc2VkIGluIHBpZCBuYW1lc3BhY2UgaXMgYSBjaGlsZCBvZiB0aGUgY3Vy cmVudGx5IGFjdGl2ZQo+ICAgcGlkIG5hbWVzcGFjZSBvciB0aGUgY3VycmVudGx5IGFjdGl2ZSBw aWQgbmFtZXNwYWNlIGl0c2VsZi4KPiAKPiAgIEFsbG93aW5nIHRoZSBjdXJyZW50bHkgYWN0aXZl IHBpZCBuYW1lc3BhY2UgaXMgaW1wb3J0YW50IHNvCj4gICB0aGUgZWZmZWN0cyBvZiBhbiBlYXJs aWVyIHNldG5zIGNhbiBiZSBjYW5jZWxsZWQuCj4gCj4gU2lnbmVkLW9mZi1ieTogRXJpYyBXLiBC aWVkZXJtYW4gPGViaWVkZXJtQHhtaXNzaW9uLmNvbT4KPiAtLS0KCkhpIEVyaWMKCkkgbm90aWNl ZCB0aGF0LGFmdGVyIHdlIGNhbGwgc2V0bnMgdG8gY2hhbmdlIHRhc2sncyBwaWRucyB0byBjb250 YWluZXIgQSdzIHBpZG5zLgp3ZSBjYW4ndCBzZWUgdGhpcyB0YXNrIGluIGNvbnRhaW5lciBBJ3Mg cHJvYyBmaWxlc3lzdGVtLgoKSXMgdGhpcyB3aGF0IHdlIGV4cGVjdGVkPwoKVGhhbmtzCkdhbwpf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpDb250YWluZXJz IG1haWxpbmcgbGlzdApDb250YWluZXJzQGxpc3RzLmxpbnV4LWZvdW5kYXRpb24ub3JnCmh0dHBz Oi8vbGlzdHMubGludXhmb3VuZGF0aW9uLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2NvbnRhaW5lcnM= From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753378Ab2KSJMI (ORCPT ); Mon, 19 Nov 2012 04:12:08 -0500 Received: from cn.fujitsu.com ([222.73.24.84]:12721 "EHLO song.cn.fujitsu.com" rhost-flags-OK-FAIL-OK-OK) by vger.kernel.org with ESMTP id S1753049Ab2KSJMG convert rfc822-to-8bit (ORCPT ); Mon, 19 Nov 2012 04:12:06 -0500 X-IronPort-AV: E=Sophos;i="4.83,278,1352044800"; d="scan'208";a="6229943" Message-ID: <50A9F7DE.60807@cn.fujitsu.com> Date: Mon, 19 Nov 2012 17:11:58 +0800 From: Gao feng User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:15.0) Gecko/20120911 Thunderbird/15.0.1 MIME-Version: 1.0 To: "Eric W. Biederman" CC: Linux Containers , linux-kernel@vger.kernel.org, Oleg Nesterov , Serge Hallyn , Andrew Morton Subject: Re: [PATCH 09/11] pidns: Add setns support References: <8739097bkk.fsf@xmission.com> <1353083750-3621-1-git-send-email-ebiederm@xmission.com> <1353083750-3621-9-git-send-email-ebiederm@xmission.com> In-Reply-To: <1353083750-3621-9-git-send-email-ebiederm@xmission.com> X-MIMETrack: Itemize by SMTP Server on mailserver/fnst(Release 8.5.3|September 15, 2011) at 2012/11/19 17:11:51, Serialize by Router on mailserver/fnst(Release 8.5.3|September 15, 2011) at 2012/11/19 17:11:52 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8BIT Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org 于 2012年11月17日 00:35, Eric W. Biederman 写道: > From: "Eric W. Biederman" > > - Pid namespaces are designed to be inescapable so verify that the > passed in pid namespace is a child of the currently active > pid namespace or the currently active pid namespace itself. > > Allowing the currently active pid namespace is important so > the effects of an earlier setns can be cancelled. > > Signed-off-by: Eric W. Biederman > --- Hi Eric I noticed that,after we call setns to change task's pidns to container A's pidns. we can't see this task in container A's proc filesystem. Is this what we expected? Thanks Gao