Namespaces in operation, part 2: the namespaces API

Posted Jan 9, 2013 0:23 UTC (Wed) by rvolgers (guest, #63218)
In reply to: Namespaces in operation, part 2: the namespaces API by justincormack
Parent article: Namespaces in operation, part 2: the namespaces API

Looking at the source a user namespace root user has all capabilities within that namespace, and raw socket access is controlled by a ns_capable(...) check, so it should be possible.

I have not tested this, so take it with a grain of salt.