| |||||||||||||
Namespaces in operation, part 4: more on PID namespacesNamespaces in operation, part 4: more on PID namespacesPosted Feb 5, 2013 16:18 UTC (Tue) by bjencks (subscriber, #80303)In reply to: Namespaces in operation, part 4: more on PID namespaces by alex2 Parent article: Namespaces in operation, part 4: more on PID namespaces
A fresh network namespace only has a loopback interface. If you don't add any other interfaces, it's totally isolated network-wise.
(Note that you can still connect to filesystem-namespace unix sockets if you can access them as files -- you need to chroot or use mount namespaces if you want to hide them as well. I believe abstract namespace unix sockets are isolated per-namespace.)
(Log in to post comments)
|
|||||||||||||