From mboxrd@z Thu Jan 1 00:00:00 1970 From: ebiederm-aS9lmoZGLiVWk0Htik3J/w@public.gmane.org (Eric W. Biederman) Subject: Re: [PATCH 2/4] clone.2: Describe the user namespace Date: Thu, 27 Dec 2012 09:20:38 -0800 Message-ID: <87r4mbv2c9.fsf@xmission.com> References: <87a9u4rmz0.fsf@xmission.com> <87y5hnq3d5.fsf@xmission.com> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: In-Reply-To: (Michael Kerrisk's message of "Thu, 27 Dec 2012 11:16:17 +0100") List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: containers-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org Errors-To: containers-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org To: mtk.manpages-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org Cc: Linux API , Linux Containers List-Id: containers.vger.kernel.org Ik1pY2hhZWwgS2VycmlzayAobWFuLXBhZ2VzKSIgPG10ay5tYW5wYWdlc0BnbWFpbC5jb20+IHdy aXRlczoKCj4gSGkgRXJpYywKPgo+IE9uIFR1ZSwgTm92IDI3LCAyMDEyIGF0IDE6NDYgQU0sIEVy aWMgVy4gQmllZGVybWFuCj4gPGViaWVkZXJtQHhtaXNzaW9uLmNvbT4gd3JvdGU6Cj4+Cj4+IFNp Z25lZC1vZmYtYnk6ICJFcmljIFcuIEJpZWRlcm1hbiIgPGViaWVkZXJtQHhtaXNzaW9uLmNvbT4K Pj4gLS0tCj4+ICBtYW4yL2Nsb25lLjIgfCAgIDM5ICsrKysrKysrKysrKysrKysrKysrKysrKysr KysrKysrKysrKysrKwo+PiAgMSBmaWxlcyBjaGFuZ2VkLCAzOSBpbnNlcnRpb25zKCspLCAwIGRl bGV0aW9ucygtKQo+Pgo+PiBkaWZmIC0tZ2l0IGEvbWFuMi9jbG9uZS4yIGIvbWFuMi9jbG9uZS4y Cj4+IGluZGV4IDA1ODIwNTcuLjQ1NjY2NzcgMTAwNjQ0Cj4+IC0tLSBhL21hbjIvY2xvbmUuMgo+ PiArKysgYi9tYW4yL2Nsb25lLjIKPj4gQEAgLTM2Niw2ICszNjYsNDUgQEAgaW4gdGhlIHNhbWUK Pj4gIC5CUiBjbG9uZSAoKQo+PiAgY2FsbC4KPj4gIC5UUAo+PiArLkJSIENMT05FX05FV1VTRVIg IiAoc2luY2UgTGludXggMy42KSIKPgo+IFdoeSAic2luY2UgTGludXggMy42Ij8gQXMgZmFzIGFz IEkgY2FuIHNlZSwgQ0xPTkVfTkVXVVNFUiBmaXJzdCBnYWluZWQKPiBzb21lIG1lYW5pbmcgaW4g Mi42LjI5LgoKTG9va2luZyBhdCBpdCB3aGVyZSBJIGhhdmUgc2FpZCAzLjYgdGhhdCBpcyB3cm9u Zy4gIEkgbWVhbnQgMy41LgoKSSB0aGluayBJIG1hZGUgdGhlIHNhbWUgbWlzdGFrZSBpbiBvbmUg b3IgdHdvIG90aGVyIG1hbnBhZ2VzLiAgTm90aGluZwp3YXMgbWVyZ2VkIGluIDMuNiB1bmZvcnR1 bmF0ZWx5LgoKTXkgaW50ZW50IHdhcyB0aGVzZSBhcmUgdGhlIHNlbWFudGljcyBvZiB1c2VyIG5h bWVzcGFjZXMgc2luY2UgMy41LAp3aGVuIG15IHJld29yay9yZWZvY3VzaW5nIG9mIHRoZW0gd2Fz IG1lcmdlZC4KClNpbmNlIDMuNSBhbGwgdGhhdCBoYXMgcmVhbGx5IGhhcHBlbmVkIHdpdGggdXNl ciBuYW1lc3BhY2VzIGlzIHRoZQp1aWQvZ2lkIHRvIGt1aWQva2dpZCBjb252ZXJzaW9uLCBwZXJt aXNzaW9uIGNoZWNrcyBoYXZlIGJlZW4gcmVsYXhlZCwKYW5kIGEgZmV3IGJ1Z3MgaGF2ZSBiZWVu IGZpeGVkLgoKMy44IGlzIGh1Z2UgZnJvbSBhIHVzYWJpbGl0eSBzdGFuZHBvaW50LiAgMy44IGlz IGh1Z2UgYmVjYXVzZSBzZXRucygpLAphbmQgdW5zaGFyZSgpIGFyZSBub3cgY29tcGxldGUgZnJv bSBhIG5hbWVzcGFjZSBwZXJzcGVjdGl2ZSwgYW5kIGJlY2F1c2UKZW5vdWdoIHBlcm1pc3Npb24g Y2hlY2tzIGhhdmUgYmVlbiByZWxheGVkIGluIHVzZXIgbmFtZXNwYWNlcyB0aGF0IHlvdQpjYW4g cmVhbGx5IHN0YXJ0IHVzaW5nIHRoZW0uCgpCdXQgc2VtYW50aWNhbGx5IGZyb20gYSB1c2VyIG5h bWVzcGFjZSBwZXJzcGVjdGl2ZSBub3RoaW5nIHJlYWxseSBoYXMKY2hhbmdlZCBpbiAzLjguCgo+ PiArSWYKPj4gKy5CIENMT05FX05FV1VTRVIKPj4gK2lzIHNldCwgdGhlIGNyZWF0ZSB0aGUgcHJv Y2VzcyBpbiBhIG5ldyB1c2VyIG5hbWVzcGFjZS4gIElmIHRoaXMgZmxhZyBpcyBub3Qgc2V0LCB0 aGVuIChhcyB3aXRoCj4+ICsuQlIgZm9yayAoMikpLAo+PiArdGhlIHByb2Nlc3MgaXMgY3JlYXRl ZCBpbiB0aGUgc2FtZSB1c2VyIG5hbWVzcGFjZSBhcyB0aGUgY2FsbGluZyBwcm9jZXNzLgo+PiAr Cj4+ICtBIHVzZXIgbmFtZXNwYWNlIHByb3ZpZGVzIGFuIGlzb2xhdGVkIGVudmlyb25tZW50IGZv ciBzZWN1cml0eSByZWxhdGVkIGlkZW50aWZpZXJzIGluIHBhcnRpY3VsYXIKPj4gK3VpZHMsIGdp ZHMsIGtleXMgKHNlZQo+PiArLkJSIGtleWN0bCAoMikpLAo+PiArYW5kIGNhcGFiaWxpdGllcy4K Pj4gKwo+PiArV2hlbiBhIHVzZXIgbmFtZXNwYWNlIGlzIGNyZWF0ZWQgaXQgaW5pdGlhbGx5IHN0 YXJ0cyBvdXQgd2l0aG91dCBhIG1hcHBpbmcgb2YgdWlkcyBhbmQgZ2lkcwo+PiArdG8gdGhlIHBh cmVudCB1c2VyIG5hbWVzcGFjZS4gIFRoZSBkZXNpcmVkIG1hcHBpbmcgb2YgdWlkcyB0byB0aGUg cGFyZW50IHVzZXIgbmFtZXNwYWNlCj4+ICttYXkgYmUgc2V0IGJ5IHdyaXR0aW5nIGludG8KPj4g Ky5JUiAvcHJvYy9bcGlkXS91aWRfbWFwLgo+PiArVGhlIGRlc2lyZWQgbWFwcGluZyBvZiBnaWRz IHRvIHRoZSBwYXJlbnQgdXNlciBuYW1lc3BhY2UgbWF5IGJlIHNldCBieSB3cml0aW5uZyBpbnRv Cj4+ICsuSVIgL3Byb2MvW3BpZF0vZ2lkX21hcC4KPj4gKwo+PiArVGhlIGZpcnN0IHByb2Nlc3Mg aW4gYSB1c2VyIG5hbWVzcGFjZSBzdGFydHMgb3V0IHdpdGggYSBjb21wbGV0ZSBzZXQgb2YgY2Fw YWJpbGl0aWVzIHdpdGgKPj4gK3Jlc3BlY3QgdG8gdGhlIG5ldyB1c2VyIG5hbWVzcGFjZS4KPj4g Kwo+PiArc3lzY2FsbHMgdGhhdCByZXR1cm4gdWlkcyBhbmQgZ2lkcyB3aWxsIGVpdGhlciByZXR1 cm4gdGhlIHVpZCBvciBnaWQgbWFwcGVkIGludG8gdGhlIGN1cnJlbnQKPj4gK3VzZXIgbmFtZXNw YWNlIGlmIHRoZXJlIGlzIGEgbWFwcGluZyBvciBkZXBlbmRpbmcgb24gdGhlIGNvbnRleHQgd2ls bCByZXR1cm4gZWl0aGVyCj4+ICt0aGUgb3ZlcmZsb3d1aWQgKGRlZmF1bHQgNjU1MzQpIG9yIHRo ZSBvdmVyZmxvd2dpZCAoZGVmYXVsdCA2NTUzNCkuIFNlZQo+PiArLklSIC9wcm9jL3N5cy9rZXJu ZWwvb3ZlcmZsb3d1aWQsIC9wcm9jL3N5cy9rZXJuZWwvb3ZlcmZsb3dnaWQKPj4gKwo+PiArQXMg b2YgTGludXggMy44IG5vIHByaXZpbGlnZXMgYXJlIG5lZWRlZCB0byBjcmVhdGUgYSB1c2VyIG5h bWVzcGFjZSwKPj4gK2FuZCBtb3VudCwgcGlkLCBpcGMsIG5ldCwgdXRzIG5hbWVzcGFjZXMgY2Fu IGJlIGNyZWF0ZWQgd2l0aCBqdXN0Cj4+ICtDQVBfU1lTX0FETUlOIHByaXZpbGVnZXMgaW4geW91 ciBjdXJyZW50IHVzZXIgbmFtZXNwYWNlLgo+PiArCj4+ICtPdmVyIHRoZSB5ZWFycyB0aGVyZSBo YXZlIGJlZW4gYSBsb3Qgb2YgZmVhdHVyZXMgdGhhdCBoYXZlIGJlZW4gYWRkZWQKPj4gK3RvIHRo ZSBsaW51eCBrZXJuZWwgdGhhdCBhcmUgb25seSBhdmFpbGFibGUgdG8gcHJpdmlsZWdlZCB1c2Vy cwo+PiArYmVjYXVzZSBvZiB0aGVpciBwb3RlbnRpYWwgdG8gY29uZnVzZSBzZXR1aWQgcm9vdCBh cHBsaWNhdGlvbnMuICBJbgo+PiArZ2VuZXJhbCBpdCBiZWNvbWVzIHNhZmUgdG8gYWxsb3cgdGhl IHJvb3QgdXNlciBpbiBhIHVzZXIgbmFtZXNwYWNlIHRvCj4+ICt1c2UgdGhvc2UgZmVhdHVyZXMg YmVjYXVzZSBpdCBpcyBpbXBvc3NpYmxlIHdoaWxlIGluIGEgdXNlciBuYW1lc3BhY2UKPj4gK3Rv IGdhaW4gbW9yZSBwcml2aWxlZ2UgdGhhbiB0aGUgcm9vdCB1c2VyIG9mIGEgdXNlciBuYW1lc3Bh Y2UgaGFzLgo+PiArCj4+ICsuVFAKPj4gIC5CUiBDTE9ORV9ORVdQSUQgIiAoc2luY2UgTGludXgg Mi42LjI0KSIKPj4gIC5cIiBUaGlzIGV4cGxhbmF0aW9uIGRyYXdzIGEgbG90IG9mIGRldGFpbHMg ZnJvbQo+PiAgLlwiIGh0dHA6Ly9sd24ubmV0L0FydGljbGVzLzI1OTIxNy8KPgo+IEkgcmV3b3Jr ZWQgeW91ciB0ZXh0IHNvbWV3aGF0LiBDb3VsZCB5b3UgcGxlYXNlIHJldmlldyB0aGUgZm9sbG93 aW5nOgo+Cj4gW1sKPiAgICAgICAgQ0xPTkVfTkVXVVNFUgo+ICAgICAgICAgICAgICAgKFRoaXMg IGZsYWcgZmlyc3QgYmVjYW1lIG1lYW5pbmdmdWwgZm9yIGNsb25lKCkgaW4gTGludXgKPiAgICAg ICAgICAgICAgIDIuNi4yOSwgYnV0IHRoZSBpbXBsZW1lbnRhdGlvbiBvZiAgdXNlciAgbmFtZXNw YWNlcyAgd2FzCj4gICAgICAgICAgICAgICBvbmx5ICBjb21wbGV0ZWQgaW4gTGludXggMy44LikK CkxvbmcgcmFudCBhYm91dCAyLjYuMjkgdnMgMy44IGFib3ZlLiAgSSB0aGluayB3aGF0IHdlIG5l ZWQgdG8gc2F5IGlzOgoKICAgICAgICAgICAgICAgIChUaGlzICBmbGFnIGZpcnN0IGJlY2FtZSBt ZWFuaW5nZnVsIGZvciBjbG9uZSgpIGluIExpbnV4CiAgICAgICAgICAgICAgICAyLjYuMjksIHRo ZSBjdXJyZW50IHNlbWFudGljcyB3ZXJlIG1lcmdlZCBwcmVzZW50IGluCiAgICAgICAgICAgICAg ICAzLjUsIGFuZCB1c2VyIG5hbWVzcGFjZXMgb25seSByZWFsbHkgYmVjYW1lIHVzYWJsZSBpbiAz LjguKQoKPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgSWYg Q0xPTkVfTkVXVVNFUiBpcyBzZXQsCj4gICAgICAgICAgICAgICB0aGVuIGNyZWF0ZSB0aGUgcHJv Y2VzcyBpbiBhICBuZXcgIHVzZXIgIG5hbWVzcGFjZS4gICBJZgo+ICAgICAgICAgICAgICAgdGhp cyBmbGFnIGlzIG5vdCBzZXQsIHRoZW4gKGFzIHdpdGggZm9yaygyKSkgdGhlIHByb2Nlc3MKPiAg ICAgICAgICAgICAgIGlzIGNyZWF0ZWQgaW4gdGhlIHNhbWUgdXNlciAgbmFtZXNwYWNlICBhcyAg dGhlICBjYWxsaW5nCj4gICAgICAgICAgICAgICBwcm9jZXNzLgo+Cj4gICAgICAgICAgICAgICBB ICB1c2VyICBuYW1lc3BhY2UgIHByb3ZpZGVzIGFuIGlzb2xhdGVkIGVudmlyb25tZW50IGZvcgo+ ICAgICAgICAgICAgICAgc2VjdXJpdHkgcmVsYXRlZCBpZGVudGlmaWVycywgaW4gcGFydGljdWxh ciwgIHVzZXIgIElEcywKPiAgICAgICAgICAgICAgIGdyb3VwIElEcywga2V5cyAoc2VlIGtleWN0 bCgyKSksIGFuZCBjYXBhYmlsaXRpZXMuCj4KPiAgICAgICAgICAgICAgIFdoZW4gIGEgdXNlciBu YW1lc3BhY2UgaXMgY3JlYXRlZCwgaXQgc3RhcnRzIG91dCB3aXRob3V0Cj4gICAgICAgICAgICAg ICBhIG1hcHBpbmcgb2YgdXNlciBJRHMgKGdyb3VwIElEcykgIHRvICB0aGUgIHBhcmVudCAgdXNl cgo+ICAgICAgICAgICAgICAgbmFtZXNwYWNlLiAgIFRoZSBkZXNpcmVkIG1hcHBpbmcgb2YgdXNl ciBJRHMgKGdyb3VwIElEcykKPiAgICAgICAgICAgICAgIHRvIHRoZSBwYXJlbnQgdXNlciBuYW1l c3BhY2UgbWF5IGJlIHNldCBieSB3cml0aW5nICBpbnRvCj4gICAgICAgICAgICAgICAvcHJvYy9b cGlkXS91aWRfbWFwICgvcHJvYy9bcGlkXS9naWRfbWFwKTsgc2VlIHByb2MoNSkuCgoJCS9wcm9j L1twaWRdL3Byb2ppZF9tYXAgZGVzZXJ2ZXMgYSBtZW50aW9uLiAgTm90IHRoYXQKICAgICAgICAg ICAgICAgIEkgYW0gYSBmYW4gb2YgcHJvamVjdCBpcyBvciB0aGF0IHhmcyB3aGVyZSB0aGUgYXJl CiAgICAgICAgICAgICAgICBpbXBsZW1lbnRlZCBoYXMgYmVlbiBjb252ZXJ0ZWQgeWV0IGJ1dC4u Li4KCj4gICAgICAgICAgICAgICBUaGUgIGZpcnN0IHByb2Nlc3MgaW4gYSB1c2VyIG5hbWVzcGFj ZSBzdGFydHMgb3V0IHdpdGggYQo+ICAgICAgICAgICAgICAgY29tcGxldGUgc2V0IG9mIGNhcGFi aWxpdGllcyB3aXRoICByZXNwZWN0ICB0byAgdGhlICBuZXcKPiAgICAgICAgICAgICAgIHVzZXIg bmFtZXNwYWNlLgo+Cj4gICAgICAgICAgICAgICBTeXN0ZW0gIGNhbGxzICB0aGF0ICByZXR1cm4g IHVzZXIgIElEcyAgKGdyb3VwIElEcykgd2lsbAo+ICAgICAgICAgICAgICAgcmV0dXJuIGVpdGhl ciB0aGUgdXNlciBJRCAoZ3JvdXAgIElEKSAgbWFwcGVkICBpbnRvICB0aGUKPiAgICAgICAgICAg ICAgIGN1cnJlbnQgIHVzZXIgIG5hbWVzcGFjZSAgaWYgIHRoZXJlIGlzIGEgbWFwcGluZywgb3Ig dGhlCj4gICAgICAgICAgICAgICBvdmVyZmxvdyB1c2VyIElEIChncm91cCBJRCk7IHRoZSBkZWZh dWx0IHZhbHVlICBmb3IgIHRoZQo+ICAgICAgICAgICAgICAgb3ZlcmZsb3cgIHVzZXIgSUQgKGdy b3VwIElEKSBpcyA2NTUzNC4gIFNlZSB0aGUgZGVzY3JpcOKAkAo+ICAgICAgICAgICAgICAgdGlv bnMgb2YgL3Byb2Mvc3lzL2tlcm5lbC9vdmVyZmxvd3VpZCBhbmQgL3Byb2Mvc3lzL2tlcuKAkAo+ ICAgICAgICAgICAgICAgbmVsL292ZXJmbG93Z2lkIGluIHByb2MoNSkuCj4KPiAgICAgICAgICAg ICAgIFN0YXJ0aW5nICB3aXRoICBMaW51eCAgMy44LCAgbm8gcHJpdmlsZWdlcyBhcmUgbmVlZGVk IHRvCj4gICAgICAgICAgICAgICBjcmVhdGUgYSB1c2VyIG5hbWVzcGFjZSwgYW5kIG1vdW50LCBQ SUQsIElQQywgIG5ldCwgIGFuZAo+ICAgICAgICAgICAgICAgVVRTICAgbmFtZXNwYWNlcyAgIGNh biAgIGJlICAgY3JlYXRlZCAgIHdpdGggICBqdXN0ICB0aGUKPiAgICAgICAgICAgICAgIENBUF9T WVNfQURNSU4gY2FwYWJpbGl0eSBpbiB0aGUgY2FsbGVyJ3MgdXNlciBuYW1lc3BhY2UuCj4KPiAg ICAgICAgICAgICAgIE92ZXIgdGhlIHllYXJzLCB0aGVyZSBoYXZlIGJlZW4gYSBsb3Qgb2YgIGZl YXR1cmVzICB0aGF0Cj4gICAgICAgICAgICAgICBoYXZlIGJlZW4gYWRkZWQgdG8gdGhlIExpbnV4 IGtlcm5lbCB0aGF0IGFyZSBvbmx5IGF2YWls4oCQCj4gICAgICAgICAgICAgICBhYmxlIHRvIHBy aXZpbGVnZWQgdXNlcnMgYmVjYXVzZSBvZiB0aGVpciAgcG90ZW50aWFsICB0bwo+ICAgICAgICAg ICAgICAgY29uZnVzZSAgc2V0LXVzZXItSUQtcm9vdCAgYXBwbGljYXRpb25zLiAgSW4gZ2VuZXJh bCwgaXQKPiAgICAgICAgICAgICAgIGJlY29tZXMgc2FmZSB0byBhbGxvdyB0aGUgcm9vdCB1c2Vy IGluIGEgdXNlciAgbmFtZXNwYWNlCj4gICAgICAgICAgICAgICB0byB1c2UgdGhvc2UgZmVhdHVy ZXMgYmVjYXVzZSBpdCBpcyBpbXBvc3NpYmxlLCB3aGlsZSBpbgo+ICAgICAgICAgICAgICAgYSB1 c2VyIG5hbWVzcGFjZSwgdG8gZ2FpbiBtb3JlIHByaXZpbGVnZSB0aGFuICB0aGUgIHJvb3QKPiAg ICAgICAgICAgICAgIHVzZXIgb2YgYSB1c2VyIG5hbWVzcGFjZSBoYXMuCgpJIGRvbid0IGhhdmUg YW55IHByb2JsZW1zIHdpdGggdGhpcyBiaXQgb2YgdGV4dC4KCkl0IG9jY3VycyB0byBtZSB0aGF0 IHdoYXQgaXMgZ29pbmcgb24gd2l0aCBjYXBhYmlsaXRpZXMgYW5kIHVzZXIKbmFtZXNwYWNlcyBu ZWVkcyB0byBiZSBkb2N1bWVudGVkIGJldHRlci4gIFRoZXJlIHdhcyBhIG1pbm9yIGJ1ZyB3aXRo CnRoZW0gdGhpcyByZWxlYXNlIGN5Y2xlIGFuZCBJIHJlYWxpemVkIHdoaWxlIHRoZSBjdXJyZW50 IGRlZmluaXRpb24KbWFrZXMgc2Vuc2UgYW5kIGlzbid0IGhhcmQgdG8gdW5kZXJzdGFuZCBpbiBn ZW5lcmFsLiAgSW4gZGV0YWlsIHRoZQppbnRlcmFjdGlvbiBvZiBjYXBhYmlsaXRpZXMgYW5kIHVz ZXIgbmFtZXNwYWNlcyBhcmUgaGFyZCB0byBkZXNjcmliZS4KCkkgdGhpbmsgY2FwYWJpbGl0aWVz IGFuZCB1c2VyIG5hbWVzcGFjZXMgYXJlIHRoZSB3b3JrIG9mIGEgZnV0dXJlIHBhdGNoCmhvd2V2 ZXIuCgo+IF1dCj4KPiBUaGFua3MsCj4KPiBNaWNoYWVsCl9fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fCkNvbnRhaW5lcnMgbWFpbGluZyBsaXN0CkNvbnRhaW5l cnNAbGlzdHMubGludXgtZm91bmRhdGlvbi5vcmcKaHR0cHM6Ly9saXN0cy5saW51eGZvdW5kYXRp b24ub3JnL21haWxtYW4vbGlzdGluZm8vY29udGFpbmVycw==