What about this other LWN article "A new approach to user namespaces": https://lwn.net/Articles/491310/ https://lwn.net/Articles/491310/ ? > It allows for appl

What about this other LWN article "A new approach to user namespaces": https://lwn.net/Articles/491310/ https://lwn.net/Articles/491310/ ? > It allows for applications with no capabilities to use multiple uids and to implement privilege separation. I certainly see user namespaces like this as having the potential to make linux systems more secure.