From mboxrd@z Thu Jan 1 00:00:00 1970 From: Serge Hallyn Subject: Re: [PATCH RFC] audit: provide namespace information in user originated records Date: Wed, 20 Mar 2013 21:21:16 -0500 Message-ID: <20130321022116.GA14502@sergelap> References: <877gl48iaz.fsf@xmission.com> <20130319122408.GC20187@redhat.com> <874ng7gcst.fsf@xmission.com> <20130320154503.GF20187@redhat.com> <20130320183652.GA13839@sergelap> <1363804924.2333.12.camel@localhost> <20130320184952.GA16488@sergelap> <1363806092.2333.19.camel@localhost> <87y5dh8xl7.fsf@xmission.com> <1363830363.17962.18.camel@localhost> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: Content-Disposition: inline In-Reply-To: <1363830363.17962.18.camel@localhost> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: containers-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org Errors-To: containers-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org To: Eric Paris Cc: Linux Containers , linux-audit-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org, "Eric W. Biederman" List-Id: linux-audit@redhat.com Quoting Eric Paris (eparis-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org): > So the kernel socket(s) would be per network namespace, but we divide > messages per user namespace? Which socket do I send them on, > considering the possible crazy many<->many mappings between user and > network namespaces. It all makes me cry a little. not many-many - each netns is owned by exactly one userns. The userns from which the netns was created. -serge