Support for user namespaces for /proc/net/ip_tables_names
Hi all,
Even that in general there is support inside iptables for user namespaces, the iptables-save and other commands that rely on reading the /proc/net/ip_tables_names don't work, because the permissions on this file are only 0440/root:root. Besides modifying net/netfilter/x_tables.c:xt_proto_init() to expose the file with permissions 0444, is there anything to be done here?
Cheers,
Alin.