|author||Eric W. Biederman <firstname.lastname@example.org>||2011-06-15 10:21:48 -0700|
|committer||Eric W. Biederman <email@example.com>||2012-11-20 04:19:49 -0800|
proc: Usable inode numbers for the namespace file descriptors.
Assign a unique proc inode to each namespace, and use that inode number to ensure we only allocate at most one proc inode for every namespace in proc. A single proc inode per namespace allows userspace to test to see if two processes are in the same namespace. This has been a long requested feature and only blocked because a naive implementation would put the id in a global space and would ultimately require having a namespace for the names of namespaces, making migration and certain virtualization tricks impossible. We still don't have per superblock inode numbers for proc, which appears necessary for application unaware checkpoint/restart and migrations (if the application is using namespace file descriptors) but that is now allowd by the design if it becomes important. I have preallocated the ipc and uts initial proc inode numbers so their structures can be statically initialized. Signed-off-by: Eric W. Biederman <firstname.lastname@example.org>
Diffstat (limited to 'security')
0 files changed, 0 insertions, 0 deletions