* Support for user namespaces for /proc/net/ip_tables_names
@ 2014-06-17 16:07 Alin Dobre
0 siblings, 0 replies; only message in thread
From: Alin Dobre @ 2014-06-17 16:07 UTC (permalink / raw)
To: netfilter-u79uwXL29TY76Z2rM5mHXA,
containers-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA
Cc: Eric W. Biederman
Hi all,
Even that in general there is support inside iptables for user
namespaces, the iptables-save and other commands that rely on reading
the /proc/net/ip_tables_names don't work, because the permissions on
this file are only 0440/root:root. Besides modifying
net/netfilter/x_tables.c:xt_proto_init() to expose the file with
permissions 0444, is there anything to be done here?
Cheers,
Alin.
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2014-06-17 16:07 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2014-06-17 16:07 Support for user namespaces for /proc/net/ip_tables_names Alin Dobre
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).