Re: [RFC PATCH 04/27] containers: Allow a process to be forked into a container
From: David Howells
Date: Tue Feb 19 2019 - 18:17:07 EST
Eric W. Biederman <ebiederm@xxxxxxxxxxxx> wrote:
> > Further attempts to fork into the container will be rejected.
>
> There are no technical reasons to disallow this, and may good practical
> reasons to allow this.
Fair enough; that can be done. Could even emulate /sbin/request-key upcalling
that way, with the manager spawning the daemon into the container with it.
> So you are breaking nsenter, and it's like.
It shouldn't stop nsenter() from working.
David