In Fedora currently the / mount point is made rshared during the boot so
the mounts and umounts of system mountpoints affects all the namespaces
that are created with the unshare call. However the polyinstantiated
directories must be made explicitly private. To support this without
explicit marking polyinstantiated directories private this patch allows
doing that implictly in the pam_namespace. I wrote this support as
optional with a 'mount_private' option. It could be made non-optional if
we decide so - the cost is one unnecessary bind mount in that case (on
systems that do not have the / mount point rshared).
OK to commit or should it be a non-optional?
--
Tomas Mraz
No matter how far down the wrong road you've gone, turn back.
Turkish proverb