Testing on hosts with firewalls

[Florian Weimer]

On 12/30/2016 11:51 AM, Andreas Schwab wrote:
> On Dez 30 2016, Florian Weimer <fweimer@redhat.com> wrote:
>
>> If this is a current upstream kernel with user namespaces enabled, I would
>> be worried, though.
>
> $ zgrep USER_NS /proc/config.gz
> CONFIG_USER_NS=y
> $ uname -r
> 4.9.0-2.g6fbc0c0-default

Hmm.  It turns out that the UID/GID mapping is not required.  Using 
Mike's ioctls, I could bring up the loopback interface within an 
unmodified user namespace (created by an unprivileged user).

I'm now testing the attached patch.  It should use network namespaces 
even on kernels which lack user namespace support, as long as the tests 
are run as root.

Thanks,
Florian
-------------- next part --------------
A non-text attachment was scrubbed...
Name: namespace.patch
Type: text/x-patch
Size: 11184 bytes
Desc: not available
URL: <http://sourceware.org/pipermail/libc-alpha/attachments/20161230/0226d314/attachment.bin>