Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:103814
To: internals@lists.php.net
References: <CAJd4=Ya6-vLh_Qm4vQ8phQL4OWAWJvbJABiLiS_OZUTG_jO04Q@mail.gmail.com>
Message-ID: <65339914-c10a-4922-3444-c731bd2e34d1@gmail.com>
Date: Wed, 23 Jan 2019 22:05:25 +0000
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101
 Thunderbird/60.4.0
MIME-Version: 1.0
In-Reply-To: <CAJd4=Ya6-vLh_Qm4vQ8phQL4OWAWJvbJABiLiS_OZUTG_jO04Q@mail.gmail.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Content-Language: en-GB
Subject: Re: [PHP-DEV] Exposing the linux namespaces API via pcntl_*
From: rowan.collins@gmail.com (Rowan Collins)

On 23/01/2019 21:15, Pedro Magalhães wrote:
> I think it can be useful for a language to expose this functionality to the
> users for that kind of purpose (ie. run a security sensitive task in
> isolation, simulate certain conditions like no network access, etc..). For
> that end, I've put forward https://github.com/php/php-src/pull/3760 which
> provides an implementation of `pcntl_unshare(int $flags): bool`. And I'm
> looking for some feedback if anyone would oppose the introduction of this
> function (and probably `setns` next).


Could you give an example of how this would work in the context of a PHP 
process? Would it only make sense in a CLI context, when performing some 
kind of system task?

I'm struggling to think how you'd use it in a task that would be suited 
to PHP, but that's probably just lack of imagination on my part.

Regards,

-- 
Rowan Collins
[IMSoP]