Re: [RFC PATCH 0/4] namespacefs: Proof-of-Concept

From: Steven Rostedt
Date: Fri Nov 19 2021 - 19:07:52 EST


On Fri, 19 Nov 2021 18:22:55 -0500
James Bottomley <James.Bottomley@xxxxxxxxxxxxxxxxxxxxx> wrote:

> But I could write a script or a tool to gather all the information
> without this filesystem. The namespace tree can be reconstructed by
> anything that can view the process tree and the /proc/<pid>/ns
> directory.

So basically you're stating that we could build the same thing that the
namespacefs would give us from inside a privileged container that had
access to the system procfs?

-- Steve