Loading…
This event has ended. Visit the official site or create your own event on Sched.
October 23-26, 2017 - Prague, Czech Republic
Click Here For Information & Registration
View analytic
Wednesday, October 25 • 11:15 - 11:55
Understanding User Namespaces - Michael Kerrisk, man7.org Training and Consulting

Sign up or log in to save this to your schedule and see who's attending!

Feedback form is now closed.
User namespaces are at the heart of many interesting technologies that allow isolation and sandboxing of applications, for example running containers without root privileges and sandboxes for web browser plug-ins. In this presentation, we'll look in detail at user namespaces, building up a basic understanding of what a user namespace is and going on to questions such as: what does being "superuser inside a user namespace" allow you do (and what does it not allow); what is the relationship between user namespaces and other namespace types (PID, UTS, network, etc.); and what are the security implications of user namespaces? We'll also explore some simple shell commands that can be used for creating and experimenting with user namespaces in order to better understand how they work. We'll conclude with a brief survey of some use cases for user namespaces.

Speakers
avatar for Michael Kerrisk

Michael Kerrisk

Author/Engineer, man7.org
Michael Kerrisk is a trainer, engineeer, and author of The Linux Programming Interface, a widely acclaimed book on Linux (and UNIX) system programming. His primary involvement with Linux is in testing, design review, and documentation of kernel-user-space interfaces. After 13 yea... Read More →



Wednesday October 25, 2017 11:15 - 11:55
Tyrolka
  • Experience Level Any