On Wed, Jun 01, Tomas Mraz wrote:
In Fedora currently the / mount point is made rshared during the boot
so
the mounts and umounts of system mountpoints affects all the namespaces
that are created with the unshare call. However the polyinstantiated
directories must be made explicitly private. To support this without
explicit marking polyinstantiated directories private this patch allows
doing that implictly in the pam_namespace. I wrote this support as
optional with a 'mount_private' option. It could be made non-optional if
we decide so - the cost is one unnecessary bind mount in that case (on
systems that do not have the / mount point rshared).
OK to commit or should it be a non-optional?
Ok to commit. About non-optional: openSUSE isn't using it, so there
isn't much I can say.
Thorsten
--
Thorsten Kukuk, Project Manager/Release Manager SLES
SUSE LINUX Products GmbH, Maxfeldstr. 5, D-90409 Nuernberg
GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 16746 (AG Nürnberg)