From mboxrd@z Thu Jan 1 00:00:00 1970 From: David Howells Subject: Containers don't handle keys, but should they? Date: Fri, 14 Mar 2008 11:37:59 +0000 Message-ID: <7519.1205494679@redhat.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: containers-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org Errors-To: containers-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org To: containers-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org Cc: dhowells-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org, akpm-de/tnXTf+JLsfHDXvbKv3WD2FQJk+8+b@public.gmane.org List-Id: containers.vger.kernel.org Am I right in thinking that a UID in one container is not necessarily equivalent to the numerically equivalent UID in another container? If that's the case then the key management code will need changing as it assumes all keys belonging to one numeric UID eat out of the same quota and the numeric UIDs are used in security checks. Furthermore, processes in one container can access keys created by a process in another container by ID. Is this desirable or not? David