LWN.net Logo

Namespaces in operation, part 2: the namespaces API

Namespaces in operation, part 2: the namespaces API

Posted Jan 9, 2013 0:23 UTC (Wed) by rvolgers (subscriber, #63218)
In reply to: Namespaces in operation, part 2: the namespaces API by justincormack
Parent article: Namespaces in operation, part 2: the namespaces API

Looking at the source a user namespace root user has all capabilities within that namespace, and raw socket access is controlled by a ns_capable(...) check, so it should be possible.

I have not tested this, so take it with a grain of salt.


(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds