Aleksa Sarai writes: (Summary)
Just to be clear, the "ns subdir operation" is a cgroup namespaced process moving A -> So an administrator could use rename to change the point at which a cgroupns root is rooted at, but not be able to move the actual processes within the cgroup namespace around? The administrator could also join the cgroupns (without needing to join the userns) and then just move things around that way?
Do any of those suggestions seem reasonable?
[...]
Just to be clear, the "ns subdir operation" is a cgroup namespaced process moving A -> So an administrator could use rename to change the point at which a cgroupns root is rooted at, but not be able to move the actual processes within the cgroup namespace around? The administrator could also join the cgroupns (without needing to join the userns) and then just move things around that way?
Do any of those suggestions seem reasonable?