Re: [PATCH 2/4] nsfs: add ioctl to get an owning user namespace for ns file descriptor

2016-09-06 Thread Serge E. Hallyn
Quoting Andrei Vagin (ava...@openvz.org): > From: Andrey Vagin > > Each namespace has an owning user namespace and now there is not way > to discover these relationships. > > Understending namespaces relationships allows to answer the question: > what capability does process X have to perform op

[PATCH 2/4] nsfs: add ioctl to get an owning user namespace for ns file descriptor

2016-09-06 Thread Andrei Vagin
From: Andrey Vagin Each namespace has an owning user namespace and now there is not way to discover these relationships. Understending namespaces relationships allows to answer the question: what capability does process X have to perform operations on a resource governed by namespace Y? After a

[PATCH 2/4] nsfs: add ioctl to get an owning user namespace for ns file descriptor

2016-08-26 Thread Andrei Vagin
From: Andrey Vagin Each namespace has an owning user namespace and now there is not way to discover these relationships. Understending namespaces relationships allows to answer the question: what capability does process X have to perform operations on a resource governed by namespace Y? After a