4 ms·
Yeah, because it affects networking in the entire system. If some pam session module were to set up its own network namespace that is shared by all user proces
by Vogtinator 3y ago
Yeah, because it affects networking in the entire system.
If some pam session module were to set up its own network namespace that is shared by all user processes after login, this could be (mostly) solved. The result would be some surprising behaviour though, as processes outside have a possibly vastly different view of the network.
- Joker_vD 3y agoJust like containers?.. I don't see how that's surprising or undesirable.
- Vogtinator 3y agoNot necessary undesirable, but definitely surprising as it's a major change from the current behaviour.