Hello ! The following patchset adds the user namespace and a new syscall execns. The user namespace will allow a process to unshare its user_struct table, resetting at the same time its own user_struct and all the associated accounting. The purpose of execns is to make sure that a process unsharing a namespace is free from any reference in the previous namespace. the execve() semantic seems to be the best candidate as it already flushes the previous process context. Thanks for reviewing, sharing, flaming ! C. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
- Follow-Ups:
- Re: [PATCH -mm 0/7] execns syscall and user namespace
- From: [email protected] (Eric W. Biederman)
- Re: [PATCH -mm 0/7] execns syscall and user namespace
- From: "H. Peter Anvin" <[email protected]>
- Re: [PATCH -mm 0/7] execns syscall and user namespace
- From: Arjan van de Ven <[email protected]>
- [PATCH -mm 5/7] add user namespace
- From: Cedric Le Goater <[email protected]>
- [PATCH -mm 4/7] add execns syscall to i386
- From: Cedric Le Goater <[email protected]>
- [PATCH -mm 7/7] forbid the use of the unshare syscall on ipc namespaces
- From: Cedric Le Goater <[email protected]>
- [PATCH -mm 2/7] add execns syscall to s390
- From: Cedric Le Goater <[email protected]>
- [PATCH -mm 3/7] add execns syscall to x86_64
- From: Cedric Le Goater <[email protected]>
- [PATCH -mm 6/7] add the user namespace to the execns syscall
- From: Cedric Le Goater <[email protected]>
- [PATCH -mm 1/7] add execns syscall core routine
- From: Cedric Le Goater <[email protected]>
- Re: [PATCH -mm 0/7] execns syscall and user namespace
- Prev by Date: [PATCH -mm 1/7] add execns syscall core routine
- Next by Date: [PATCH -mm 6/7] add the user namespace to the execns syscall
- Previous by thread: [patch] let CONFIG_SECCOMP default to n
- Next by thread: [PATCH -mm 1/7] add execns syscall core routine
- Index(es):