Skip to contentSkip to conversation

Support for user namespaces for /proc/net/ip_tables_names

DISCUSSION Alin Dobre 1 participant 1 message Jun 17, 2014

lore
Share & tools
lore

Alin Dobre

author
#0 lore raw

Hi all,

Even that in general there is support inside iptables for user namespaces, the iptables-save and other commands that rely on reading the /proc/net/ip_tables_names don't work, because the permissions on this file are only 0440/root:root. Besides modifying net/netfilter/x_tables.c:xt_proto_init() to expose the file with permissions 0444, is there anything to be done here?

Cheers,
Alin.