Namespaces for Security - Jake Edge, LWN.net
919 views · Published 3 October 2013 · 41:24 · Indexed 20 September 2026
Channel: The Linux Foundation · 2013 · Science & Technology
LinuxCon and CloudOpen North America, 2013: Namespace support has been growing in the Linux kernel, so there are now a number of ways that namespaces can be used to help protect Linux systems from exploits. Using namespaces (in particular, the mount, network, PID, and user namespaces) can isolate processes in ways that will prevent some types of vulnerabilities from compromising more of the system. Namespaces can be used as part of a "defense in depth" strategy to avoid the harm (or most of the harm) from exploits of vulnerable user-space applications. This talk will be for Linux developers, particularly "system level" developers. It will assume some knowledge of C and Linux, but not require in-depth knowledge of either. Participants can expect to come away with a good foundation on what namespaces are and can do, along with concrete ideas of how to use namespaces in their projects.
More from this channel
-
5:19
The Linux Foundation Video Site:: Flock
-
5:51
The Linux Foundation Video Site:: Debian & Cooliris
-
6:09
The Linux Foundation Video Site:: Slackware Linux
-
1:57
The Linux Foundation Video Site:: Bdale Garbee (Hewlett-Pack
-
1:12
The Linux Foundation Video Site:: James Morris (Red Hat) at
-
2:03
The Linux Foundation Video Site:: Bowling for Penguins
-
1:37
Linux: Be a Part of Something Big
-
1:02:32
Collaboration Summit 2013 - Panel: Hot Topics in File & Storage Systems and Memory Management