• Eric W. Biederman's avatar
    pidns: Deny strange cases when creating pid namespaces. · 225778d6
    Eric W. Biederman authored
    task_active_pid_ns(current) != current->ns_proxy->pid_ns will
    soon be allowed to support unshare and setns.
    
    The definition of creating a child pid namespace when
    task_active_pid_ns(current) != current->ns_proxy->pid_ns could be that
    we create a child pid namespace of current->ns_proxy->pid_ns.  However
    that leads to strange cases like trying to have a single process be
    init in multiple pid namespaces, which is racy and hard to think
    about.
    
    The definition of creating a child pid namespace when
    task_active_pid_ns(current) != current->ns_proxy->pid_ns could be that
    we create a child pid namespace of task_active_pid_ns(current).  While
    that seems less racy it does not provide any utility.
    
    Therefore define the semantics of creating a child pid namespace when
    task_active_pid_ns(current) != current->ns_proxy->pid_ns to be that the
    pid namespace creation fails.  That is easy to implement and easy
    to think about.
    Signed-off-by: default avatar"Eric W. Biederman" <ebiederm@xmission.com>
    225778d6
pid_namespace.c 7.34 KB