Re: [PATCH -mm 0/7] execns syscall and user namespace

Kirill Korotaev
2006-07-12T11:12:37Z

> I haven't had a chance to do a thorough review yet but why is
> this needed?
>
> What can be left shared by switching to a new namespace and then
> execing an executable?
>
> Is it not possible to ensure what you are trying to ensure with
> a good user space executable?

I agree with Eric. In OpenVZ we don't do exec(), because executable itself ensures
correct environment.

Do we need to overcomplicate kernel in this regard?

Thanks,
Kirill