[systemd-devel] namespace: session dependant mtab

Stef Bon stefbon at gmail.com
Wed Aug 3 07:07:13 PDT 2011


Hi all,

I've been looking into how namespaces work, shared mounted subtrees
and user namespaces using PAM.

My own construction is using a FUSE filesystem, some bind mounts of
system directories and (still) pam_chroot.
and looking to switch to use pam_namespace.

Anyhowe, I see that with using different namespaces still the central
managed (=system) mtab is used to lookup mounts.

Isn't it a good idea to provide every different namespace a own mtab,
containing only the mounts visible for that namespace?

Stef


More information about the systemd-devel mailing list