Re: [RCF] [PATCH] unprivileged mount/umount

Bodo Eggert
2005-05-11T19:32:33Z

On Wed, 11 May 2005, Jamie Lokier wrote:
> Bodo Eggert <harvested.in.lkml@posting.7eggert.dyndns.org> wrote:

> > > How about a new clone option "CLONE_NOSUID"?
> >
> > IMO, the clone call ist the wrong place to create namespaces. It should be
> > deprecated by a mkdir/chdir-like interface.
>
> And the mkdir/chdir interface already exists, see "cd /proc/NNN/root".

If you want persistent namespaces, this will be a PITA (I don't want a
keep-the-namespace-open-daemon), and if you don't, it will be racy
(user a logs in, while his second/nth login expires).

Keeping a list of named namespaces in kernel can be made cheap and secure.
--
Friendly fire isn't.