(unknown)

[Miklos Szeredi <miklos@szeredi.hu>]

Christoph Hellwig wrote:
> I'd rather forbid binds to the foreign namespace, though.

Bind is a directional operation.  TO a foreign namespace is already
forbidden, FROM a foreign namespace it's not.

Is that logical?  Not too much, I agree.

Which is better?

  a) removing restrictions from bind

  b) adding more restrictions to bind

That's up for discussion.  I'd opt for a).  Usually it's better to
have less restrictions in the kernel, if it doesn't impact security.

For an implementation of a) (and more) see this patchset, based on
Mike Waychison's earlier work:

  http://marc.theaimsgroup.com/?l=linux-fsdevel&m=111745909923350&w=2

Miklos