3 ms·
Not to forget per-process fs namespace, and text-only replacement of ugly ioctls.
by miga 13y ago
Not to forget per-process fs namespace, and text-only replacement of ugly ioctls.
- justincormack 13y agoLinux does have per process fs namespaces now... ioctls on the other hand...
- 4ad 13y agoIn Linux CLONE_NEWNS requires CAP_SYS_ADMIN which makes it almost completely useless; it can't be used to the extent and in the way it is used in Plan 9.
- justincormack 13y agoI think user namespaces allow that without root. Haven't tried yet though...
- yrro 13y agoI believe once you create a user namespace (https://lwn.net/Articles/528078/ https://lwn.net/Articles/528078/) you can then create the other kinds of namespaces (mount, process, etc.) without requiring privileges outside of your user namespace. LWN ran a great series on namespaces recently: part 5 (https://lwn.net/Articles/532593/ https://lwn.net/Articles/532593/) covers user namespaces.