Re: [RFC PATCH 04/27] containers: Allow a process to be forked into a container

Eric W. Biederman [off-list ref] wrote:

quoted

Further attempts to fork into the container will be rejected.

There are no technical reasons to disallow this, and may good practical
reasons to allow this.

Fair enough; that can be done.  Could even emulate /sbin/request-key upcalling
that way, with the manager spawning the daemon into the container with it.

So you are breaking nsenter, and it's like.

It shouldn't stop nsenter() from working.

David