What a namespace does

• A

  The process table is copied and filtered for each namespace

• B

  Access to /proc is restricted by file permissions

• C

  The kernel gives the namespace its own process id mapping, so host processes have no id in it

• D

  Every other process running on the host is suspended for as long as the namespaced process runs