LSM namespacing API

Paul Moore paul at paul-moore.com
Fri Aug 22 01:59:24 UTC 2025


On Thu, Aug 21, 2025 at 3:46 AM John Johansen
<john.johansen at canonical.com> wrote:
> On 8/19/25 10:47, Stephen Smalley wrote:

...

> > This is handled for other Linux namespaces by opening a pseudo file
> > under /proc/pid/ns and invoking setns(2), so not sure how we want to
> > do it.
>
> That is a possible interface, not one that I like, so I would like to
> explore other options first.

Fair enough, suggestions are definitely welcome :)

-- 
paul-moore.com



More information about the Linux-security-module-archive mailing list