[lkml]   [2019]   [Feb]   [19]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: [RFC PATCH 04/27] containers: Allow a process to be forked into a container
Eric W. Biederman <> wrote:

> > Further attempts to fork into the container will be rejected.
> There are no technical reasons to disallow this, and may good practical
> reasons to allow this.

Fair enough; that can be done. Could even emulate /sbin/request-key upcalling
that way, with the manager spawning the daemon into the container with it.

> So you are breaking nsenter, and it's like.

It shouldn't stop nsenter() from working.


 \ /
  Last update: 2019-02-20 00:18    [W:0.439 / U:6.508 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site