[9fans] Plan 9 future (Was: Re: Are the Infernospaces gone?)

[dhog@plan9.bell-labs.com dhog@plan9.bell-labs.com]

viro@math.psu.edu writes:
> Heh ;-) Three sets of patches before we get proper namespaces. Kernel
> _does_ support everything needed  right now, I'll just have to merge
> union-mount patch and add a new flag to clone(2) (==rfork()). BTW, the
> last set fed into the tree (hopefully to be there in pre7-7) includes the
> equivalent of bind(2) and support for disjoint mount trees.

How do you deal with the rather obvious security problems, eg:

	$ bind passwd /etc/passwd
	$ su - root

?

Do setuid programs get a fresh name space?

Note that Plan 9 doesn't have setuid...