Messages in this thread | | | Date | Thu, 14 Feb 2013 18:30:52 +0400 | From | Glauber Costa <> | Subject | Re: [PATCH] kernel: allow reboots from user_ns |
| |
On 02/14/2013 06:27 PM, Serge Hallyn wrote: > Quoting Glauber Costa (glommer@parallels.com): >> Reboot support for pid namespaces is already implemented and it works >> well. However, in most containers the tasks will join all namespaces, >> including the now supported user namespace. In that situation, we will >> fail the "capable" test and won't be able to reboot. >> >> The proposed solution is to allow reboots for CAP_SYS_BOOT processes >> in the user namespace that owns the pid namespace. >> >> Signed-off-by: Glauber Costa <glommer@parallels.com> > > Note Li Zefan sent this identical patch last year. It's in my own > built userns kernel, and definately required :) > I didn't see that, and using Linus' master my stop container scripts stopped working after I started using Eric's userns...
| |