Namespaces for Security - Jake Edge, LWN.net
925 views · Published 3 October 2013 · 41:24 · Indexed 12 November 2026
Channel: The Linux Foundation · 2013 · Science & Technology
LinuxCon and CloudOpen North America, 2013: Namespace support has been growing in the Linux kernel, so there are now a number of ways that namespaces can be used to help protect Linux systems from exploits. Using namespaces (in particular, the mount, network, PID, and user namespaces) can isolate processes in ways that will prevent some types of vulnerabilities from compromising more of the system. Namespaces can be used as part of a "defense in depth" strategy to avoid the harm (or most of the harm) from exploits of vulnerable user-space applications. This talk will be for Linux developers, particularly "system level" developers. It will assume some knowledge of C and Linux, but not require in-depth knowledge of either. Participants can expect to come away with a good foundation on what namespaces are and can do, along with concrete ideas of how to use namespaces in their projects.
More from this channel
-
0:37
The Linux Foundation Video Site:: Chicks dig it
-
1:01
The Origin (Japanese Subtitles)
-
5:19
The Linux Foundation Video Site:: Flock
-
0:35
The Linux Foundation Video Site:: Gnu/Linux-Desktop
-
5:51
The Linux Foundation Video Site:: Debian & Cooliris
-
6:09
The Linux Foundation Video Site:: Slackware Linux
-
1:57
The Linux Foundation Video Site:: Bdale Garbee (Hewlett-Pack
-
1:12
The Linux Foundation Video Site:: James Morris (Red Hat) at