LinuxCon Europe + CloudOpen Europe

Namespace support has been growing in the Linux kernel, so there are now a number of ways that namespaces can be used to help protect Linux systems from exploits. Using namespaces (in particular, the mount, network, PID, and user namespaces) can isolate processes in ways that will prevent some types of vulnerabilities from compromising more of the system. Namespaces can be used as part of a "defense in depth" strategy to avoid the harm (or most of the harm) from exploits of vulnerable user-space applications.