Support for user namespaces for /proc/net/ip_tables_names

Alin Dobre alin.dobre at elastichosts.com
Tue Jun 17 16:07:32 UTC 2014


Hi all,

Even that in general there is support inside iptables for user
namespaces, the iptables-save and other commands that rely on reading
the /proc/net/ip_tables_names don't work, because the permissions on
this file are only 0440/root:root. Besides modifying
net/netfilter/x_tables.c:xt_proto_init() to expose the file with
permissions 0444, is there anything to be done here?

Cheers,
Alin.


More information about the Containers mailing list