PID/UID namespaces

[Chris Rees]

On 21 May 2012 14:47, David Windsor <dwindsor at gmail.com> wrote:
> Hi,
>
> While doing some research on FreeBSD jails, I came across an item in the
> jails' TODO:
>
>
>   - be able to have a separate PID space for it
>   - be able to specify a separate UID space for it
>
> In other projects, these goals have been accomplished using namespaces.  I
> tried to see if PID/UID namespaces existed in BSD and came across something
> called Capsicum, a sandboxing project which does not appear to implement
> outright namespaces for descriptors like PID/UID, but uses something called
> a "Process Descriptor."
>
> Is namespacing of PIDs and UIDs an eventual goal of the jails project of
> FreeBSD?

It would certainly prevent many common problems when setting up jails;
UID collision is much more common than you'd think, given that the
default UIDs remain the same.

Chris