Plans for user namespaces

From	Peter Wienemann <wienemann@physik.uni-bonn.de>
Newsgroups	linux.debian.kernel
Subject	Plans for user namespaces
Date	2018-02-08 15:20 +0100
Message-ID	<vgVdn-4CJ-1@gated-at.bofh.it> (permalink)
Organization	linux.* mail to news gateway

Show all headers | View raw

Dear kernel experts,

I've got some questions concerning the plans for user namespaces:

1. In stretch unprivileged user namespaces are enabled in the
compile-time configuration of the kernel but disabled in the run-time
configuration by default. As a consequence one needs to set
"kernel.unprivileged_userns_clone=1" before one can make use of them.
Are there any plans to change the default run-time configuration for buster?

2. If the answer to the first question is "no", what is the preferred
behaviour upon installation of packages requiring the above feature?

   a) Warn the user and ask him/her to switch them on?
   b) Silently switch them on?
   c) Add instructions in README.Debian?
   d) Something else?

Cheers, Peter

Back to linux.debian.kernel | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Plans for user namespaces Peter Wienemann <wienemann@physik.uni-bonn.de> - 2018-02-08 15:20 +0100
  Re: Plans for user namespaces Ben Hutchings <ben@decadent.org.uk> - 2018-02-09 17:40 +0100

csiph-web