Support for user namespaces for /proc/net/ip_tables_names
Alin Dobre
alin.dobre at elastichosts.com
Tue Jun 17 16:07:32 UTC 2014
Hi all,
Even that in general there is support inside iptables for user
namespaces, the iptables-save and other commands that rely on reading
the /proc/net/ip_tables_names don't work, because the permissions on
this file are only 0440/root:root. Besides modifying
net/netfilter/x_tables.c:xt_proto_init() to expose the file with
permissions 0444, is there anything to be done here?
Cheers,
Alin.
More information about the Containers
mailing list