Re: [PATCH RFC] audit: provide namespace information in user originated records

Serge Hallyn
2013-03-21T02:21:16Z

Quoting Eric Paris (eparis-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org):
> So the kernel socket(s) would be per network namespace, but we divide
> messages per user namespace? Which socket do I send them on,
> considering the possible crazy many<->many mappings between user and
> network namespaces. It all makes me cry a little.

not many-many - each netns is owned by exactly one userns. The userns
from which the netns was created.

-serge