Following the previous post on UTS namespace (hostname isolation), we will now go deeper and look at a more security oriented namespace: IPC, Inter-Process Communications. If you haven’t done so already, I encourage you to read the first post of this series for an introduction to linux namespace isolation mechanism. [EDIT 2014-01-08] A Chinese translation of this post is available here Activating the IPC namespace is only a matter of adding “CLONE_NEWIPC” to the “clone” call. It req...