[Devel] Re: [RFC][PATCH 4/5] utsname namespaces: sysctl hack

[Dave Hansen]

Besides ipc and utsnames, can anybody think of some other things in
sysctl that we really need to virtualize?

It seems to me that most of the other stuff is kernel-global and we
simply won't allow anything in a container to touch it.

That said, there may be things in the future that need to get added as
we separate out different subsystems.  Things like min_free_kbytes could
have a container-centric meaning (although I think that is probably a
really bad one to mess with).

I have a slightly revamped way of doing the sysv namespace sysctl code.
I've attached a couple of (still pretty raw) patches.  Do these still
fall in the "hacks" category?

-- Dave
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sysv-do-sysctl-strategies2.patch
Type: text/x-patch
Size: 2473 bytes
Desc: not available
URL: <http://lists.openvz.org/pipermail/devel/attachments/20060419/19c7065e/attachment-0003.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sysv-do-sysctl-strategies1.patch
Type: text/x-patch
Size: 5145 bytes
Desc: not available
URL: <http://lists.openvz.org/pipermail/devel/attachments/20060419/19c7065e/attachment-0004.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sysv-do-sysctl-strategies0.patch
Type: text/x-patch
Size: 3577 bytes
Desc: not available
URL: <http://lists.openvz.org/pipermail/devel/attachments/20060419/19c7065e/attachment-0005.bin>