text: Michal Hocko <mho...@kernel.org> writes: > On Mon 17-10-16 11:39:49,. > > I haven't studied your patch too deeply but one thing that immediately > raised a red flag was that mm might be shared between processes (aka > thread groups)..
  Advertising. The core goal is to enforce the unreadability of an mm when an non-readable file is executed. This is a time of mm creation property. The enforcement of which fits very well with the security/permission checking role of the user namespace. Could this use of mm->user_ns be extended for some kind of accounting/limiting in the future? Possibly. I can imagine a limit on the total number of page table entries a group of processes are allowed to have as being a sane kind of limit in this setting much like RLIMIT_AS is sane on a single mm level. Pages don't belong to mm's so I can't imagine anything like the memcg being built on this kind of infrastructure. Eric