4 ms·
In Linux CLONE_NEWNS requires CAP_SYS_ADMIN which makes it almost completely useless; it can't be used to the extent and in the way it is used in Plan 9.
by 4ad 13y ago
In Linux CLONE_NEWNS requires CAP_SYS_ADMIN which makes it almost completely useless; it can't be used to the extent and in the way it is used in Plan 9.
- justincormack 13y agoI think user namespaces allow that without root. Haven't tried yet though...
- yrro 13y agoI believe once you create a user namespace (https://lwn.net/Articles/528078/ https://lwn.net/Articles/528078/) you can then create the other kinds of namespaces (mount, process, etc.) without requiring privileges outside of your user namespace. LWN ran a great series on namespaces recently: part 5 (https://lwn.net/Articles/532593/ https://lwn.net/Articles/532593/) covers user namespaces.