All of lore.kernel.org
 help / color / mirror / Atom feed
From: Andrew Lunn <andrew@lunn.ch>
To: Donald Sharp <sharpd@cumulusnetworks.com>
Cc: netdev@vger.kernel.org, David Ahern <dsa@cumulusnetworks.com>,
	Nicolas Dichtel <nicolas.dichtel@6wind.com>,
	Roopa Prabhu <roopa@cumulusnetworks.com>
Subject: Re: AF_UNIX sockets crossing namespace based boundaries
Date: Wed, 2 Jan 2019 15:05:14 +0100	[thread overview]
Message-ID: <20190102140514.GH22737@lunn.ch> (raw)
In-Reply-To: <CAK989ycHNM-rSK9OSvkmhK1jg1Q0bVu4BZE3DQuGown6=MzzFA@mail.gmail.com>

On Tue, Jan 01, 2019 at 07:46:07PM -0500, Donald Sharp wrote:
> I have created multiple namespaces:
> 
> sharpd@robot /v/l/frr> ip netns list
> two (id: 2)
> one (id: 1)
> EVA (id: 0)
> 
> And am running a process in namespace two that creates a named socket
> `/var/log/frr/run/zserv.api`:

Hi Donald

Just to be sure...

Are you creating only a network name space, and not a filesystem mount
namespace?

I've successfully run hundred of FRR daemons in namespaces on Linux
for simulation work, but i always use both a network namespace and
mount namespace. /var/log/frr/run/zserv.api is clearly a filesystem
path, so you need to separate these at the filesystem level.

       Andrew

  reply	other threads:[~2019-01-02 14:05 UTC|newest]

Thread overview: 5+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2019-01-02  0:46 AF_UNIX sockets crossing namespace based boundaries Donald Sharp
2019-01-02 14:05 ` Andrew Lunn [this message]
2019-01-02 15:22   ` Donald Sharp
2019-01-02 16:02     ` Andrew Lunn
2019-01-18  4:47       ` Eric W. Biederman

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20190102140514.GH22737@lunn.ch \
    --to=andrew@lunn.ch \
    --cc=dsa@cumulusnetworks.com \
    --cc=netdev@vger.kernel.org \
    --cc=nicolas.dichtel@6wind.com \
    --cc=roopa@cumulusnetworks.com \
    --cc=sharpd@cumulusnetworks.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.