4 ms·

Wrong for what exactly? I just want to run my apps with a separate TCP port namespace :)

• a-dub 5y ago
  the whole idea that you have to fork process tables, user tables, network tables and filesystems to achieve encapsulation between applications is a product of the old unix security model not being sufficient for what people are actually using these systems for today. so the popularity of containers (namespaces) and the entire ecosystem of tools like this (dating all the way back to chroots and bsd jails) basically says to me that maybe a fresh approach to security features in an operating system would lead to less complexity than what has needed to be built on top of good ol' unix.
  • otabdeveloper4 5y ago
    If I wanted security then namespaces aren't the tool I would use. (And I don't think they were ever intended as a security feature.)
    • a-dub 5y ago
      yeah i suppose you're right, point still stands. having to chop up all the kernel tables to run little mini systems just to deploy software correctly, along with choosing from a whole host of bolt on capabilities systems and sandboxing technologies makes it seem like the services provided by base unix for modern computing are looking a bit long in the tooth.