[Devel] Re: [PATCH 2/2] Kconfig : default all the namespaces to 'yes'

[Serge E. Hallyn]

Quoting Matt Helsley (matthltc at us.ibm.com):
> On Thu, Oct 07, 2010 at 03:15:33PM +0200, Daniel Lezcano wrote:
> > As the different namespaces depend on 'CONFIG_NAMESPACES', it is
> > logical to enable all the namespaces when we enable NAMESPACES.
> > 
> > Signed-off-by: Daniel Lezcano <daniel.lezcano at free.fr>
> 
> Subject of the patch email is a little confusing as it's not
> quite what happens. I'm mostly OK with it but I'm not sure we
> should enable user-ns by default just yet.
> 
> Acked-By: Matt Helsley <matthltc at us.ibm.com>

In fact, perhaps we should keep the experimental tag on user namespaces.
If/when I/someone returns to heavy hacking on user namespaces, the
changes will be very invasive.  (Of course then we get back to questions
of the usefulness of experimental tag)

In particular, when we start refusing access for certain accesses between
user namespaces, it might confuse userspace.

Definately Ack to the other two.

-serge
_______________________________________________
Containers mailing list
Containers at lists.linux-foundation.org
https://lists.linux-foundation.org/mailman/listinfo/containers