Re: [PATCH -mm 0/7] execns syscall and user namespace

[Kirill Korotaev]

> I haven't had a chance to do a thorough review yet but why is
> this needed?
>
> What can be left shared by switching to a new namespace and then
> execing an executable?
>
> Is it not possible to ensure what you are trying to ensure with
> a good user space executable?

I agree with Eric. In OpenVZ we don't do exec(), because executable itself ensures
correct environment.

Do we need to overcomplicate kernel in this regard?

Thanks,
Kirill

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/