Do you need a user namespace? I'd expect a network namespace to be enough. Am I ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		touisteur on May 10, 2023 \| parent \| context \| favorite \| on: Linux kernel use-after-free in Netfilter, local pr... Do you need a user namespace? I'd expect a network namespace to be enough. Am I missing something? Edit: should've read better, this seems to need CLONE_NEWUSER.

jwilk on May 10, 2023 [–]

You need CAP_SYS_ADMIN to create a new network namespace.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact