two problems that I can think of
1. the container people would like to eventually have the ability to
migrate containers from one system to another (or to suspend a container)
in this sort of case trying to fit the allocated PIDs from the container
into a running system is a problem if PIDs are not allowed to overlap.
2. it seems to me that there is porobably a latent security issue in
having a global PID namespace with just limited visability. the types of
bugs that may let you affect a process seem easier to make if the only
protection is visability rather then complete seperation.
David Lang
-
