Re: [PATCH v2 00/10] userns: sysctl limits for namespaces

From	"Michael Kerrisk (man-pages)" <mtk.manpages@gmail.com>
Newsgroups	linux.kernel
Subject	Re: [PATCH v2 00/10] userns: sysctl limits for namespaces
Date	2016-07-26 12:40 +0200
Message-ID	<rZ7Wh-Od-23@gated-at.bofh.it> (permalink)
References	<rXpuj-1Dd-53@gated-at.bofh.it> <rXpuh-1Dd-3@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

Hello Eric,

I realized I had a question after the last mail.

On 07/21/2016 06:39 PM, Eric W. Biederman wrote:
>
> This patchset addresses two use cases:
> - Implement a sane upper bound on the number of namespaces.
> - Provide a way for sandboxes to limit the attack surface from
>   namespaces.

Can you say more about the second point? What exactly is the
problem that is being addressed, and how does the patch series
address it? (It would be good to have those details in the
revised commit message...)

Cheers,

Michael

Back to linux.kernel | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Re: [PATCH v2 00/10] userns: sysctl limits for namespaces "Michael Kerrisk (man-pages)" <mtk.manpages@gmail.com> - 2016-07-26 12:40 +0200
  Re: [PATCH v2 00/10] userns: sysctl limits for namespaces ebiederm@xmission.com (Eric W. Biederman) - 2016-07-26 17:30 +0200
    Re: [PATCH v2 00/10] userns: sysctl limits for namespaces Kees Cook <keescook@chromium.org> - 2016-07-26 19:00 +0200
      Re: [PATCH v2 00/10] userns: sysctl limits for namespaces "Michael Kerrisk (man-pages)" <mtk.manpages@gmail.com> - 2016-07-26 19:30 +0200
        Re: [PATCH v2 00/10] userns: sysctl limits for namespaces Kees Cook <keescook@chromium.org> - 2016-07-26 22:50 +0200

csiph-web