[patch -mm 00/17] new namespaces and related syscalls

[clg at fr.ibm.com]

All,

Here's a patch serie we've been working on for a while. I'd like to
know which could make it to -mm and which need refinements. Depending
on the feedback, i'll send them on lkml at .

It feels like that the empty net namespace framework could make it
there already.


Patch menu :

* start with user and net namespace. no real feature and no unshare.
  mostly solves conflicts in nsproxy which are becoming painful.
  tasty and harmless

[patch 01/17] net namespace: empty framework
[patch 02/17] user namespace: add the framework

* follow some cleanups and code movement preparing the next drop.
  less tasty but still harmless.

[patch 03/17] namespace : export unshare of namespace and fs_struct
[patch 04/17] nsproxy: externalizes exit_task_namespaces
[patch 05/17] ipc namespace : externalizes unshare_ipcs
[patch 06/17] nsproxy: add extern to nsproxy functions
[patch 07/17] nsproxy: make put_nsproxy an extern

* nsproxy syscalls.
  real meat. 

[patch 08/17] nsproxy: add hashtable
[patch 09/17] nsproxy: add namespace flags
[patch 10/17] nsproxy: add unshare_ns and bind_ns syscalls

* use the user namespace for real. 
  wine and cheese 

[patch 11/17] user namespace: add user_namespace ptr to vfsmount
[patch 12/17] user namespace: hook permission
[patch 13/17] user namespace: implement shared mounts
[patch 14/17] user namespace: maintain user ns for priv_userns mounts to vfsmount

* finish with the stuff that make a real meal : unsharing namespaces
  some will surely find these less in sync with their taste, like 
  dessert without sugar :)

[patch 15/17] pid namespace: add unshare 
[patch 16/17] net namespace: add unshare
[patch 17/17] user namespace: add unshare

Cheers,

C.