This patchset is a proposition for the previous discussion we had a few months ago: https://lists.linux-foundation.org/pipermail/containers/2009-June/018601.html It was suggested to drop the ns_cgroup definitively and add a compatibility flag 'clone_children'.