Namespaces

A namespace wraps a global system resource in an abstraction that makes it appear to the processes within the namespace that they have their isolated instance of the global resource.

Changes to the global resource are visible to other processes that are members of the namespace but are invisible to other processes.

One use of namespaces is to implement containers.

Restrictions and Translations

Extend the CHROOT concept to other resources. CHROOT enables each process to have a different notion of the file system root.

Restrictions

Limit the number of resources a process can use.

Translations

Access resources with a name different from the one the process thinks it is using.