Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S964927AbWEJLzZ (ORCPT ); Wed, 10 May 2006 07:55:25 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S964935AbWEJLzZ (ORCPT ); Wed, 10 May 2006 07:55:25 -0400 Received: from e1.ny.us.ibm.com ([32.97.182.141]:62900 "EHLO e1.ny.us.ibm.com") by vger.kernel.org with ESMTP id S964927AbWEJLzZ (ORCPT ); Wed, 10 May 2006 07:55:25 -0400 Date: Wed, 10 May 2006 06:55:21 -0500 From: "Serge E. Hallyn" To: Al Viro Cc: "Serge E. Hallyn" , Andi Kleen , linux-kernel@vger.kernel.org, "Eric W. Biederman" , herbert@13thfloor.at, dev@sw.ru, sam@vilain.net, xemul@sw.ru, haveblue@us.ibm.com, clg@fr.ibm.com, frankeh@us.ibm.com Subject: Re: [PATCH 1/9] nsproxy: Introduce nsproxy Message-ID: <20060510115520.GA25720@sergelap.austin.ibm.com> References: <29vfyljM.2006059-s@us.ibm.com> <20060510021129.GB32523@sergelap.austin.ibm.com> <20060510100057.GA27946@ftp.linux.org.uk> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20060510100057.GA27946@ftp.linux.org.uk> User-Agent: Mutt/1.5.11 Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1348 Lines: 30 Quoting Al Viro (viro@ftp.linux.org.uk): > On Tue, May 09, 2006 at 09:11:29PM -0500, Serge E. Hallyn wrote: > > Introduce the nsproxy struct. Doesn't do anything yet, but has it's > > own lifecycle pretty much mirrorring the fs namespace. > > > > Subsequent patches will move the namespace struct into the nsproxy. > > Then as more namespaces are introduced, such as utsname, they can > > be added to the nsproxy as well. > > Is there any reason why those can't be simply part of namespace? I.e. > be carried by the stuff mounted in standard places... The argument has been that it is desirable to be able to unshare these namespaces - uid, pid, network, sysv, utsname, fs-namespace - separately. Are you talking about having these all be part of a single namespace unshared all at once (and stored in struct namespace)? Or am I misunderstandimg you entirely? Andi Kleen (I believe) thinks it should be like that, all or nothing. I think Herbert Poetzl had current examples where vserver is used to unshare just pieces, i.e. apache unsharing network but sharing global pidspace. thanks, -serge - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/