Oren Laadan <or...@cs.columbia.edu> writes: > Can't think of a specific scenario, but I wonder if there would > be a problem (security or otherwise) with a process that only > partly belongs to a container, even if for a short time ?
If we can find an instance of that then there are fundamental problems with setns. The driving use case right now is for things like network namespaces where userspace really wants to have several at once, and wants to be able to control them all. Eric _______________________________________________ Containers mailing list contain...@lists.linux-foundation.org https://lists.linux-foundation.org/mailman/listinfo/containers _______________________________________________ Devel mailing list Devel@openvz.org https://openvz.org/mailman/listinfo/devel
