Re: [PATCH 0/3] New system call, unshare

Florian Weimer
2005-08-10T14:09:27Z

* Janak Desai:

> With unshare, namespace setup can be done using PAM session
> management functions without patching individual commands.

I don't think it's a good idea to use security-critical code well
without its original specification. Clearly the current situation
sucks, but this is mainly a lack of PAM functionality, IMHO.