mirror of
https://repo.or.cz/socat.git
synced 2024-12-22 15:32:35 +00:00
74 lines
1.9 KiB
C
74 lines
1.9 KiB
C
|
/* Source: xio-namespaces.c */
|
||
|
/* Copyright Gerhard Rieger and contributors (see file CHANGES) */
|
||
|
/* Published under the GNU General Public License V.2, see file COPYING */
|
||
|
|
||
|
/* This file contains Linux namespace related code */
|
||
|
|
||
|
#include "xiosysincludes.h"
|
||
|
#include "xioopen.h"
|
||
|
|
||
|
#include "xio-namespaces.h"
|
||
|
|
||
|
#if WITH_NAMESPACES
|
||
|
|
||
|
const struct optdesc opt_set_netns = { "netns", NULL, OPT_SET_NETNS, GROUP_PROCESS, PH_INIT, TYPE_STRING, OFUNC_SET_NAMESPACE, 0, 0, 0 };
|
||
|
|
||
|
|
||
|
/* Set the given namespace. Requires root or the appropriate CAP_*-
|
||
|
Returns 0 on success, or -1 on error. */
|
||
|
int xio_set_namespace(
|
||
|
const char *nstype,
|
||
|
const char *nsname)
|
||
|
{
|
||
|
char nspath[PATH_MAX];
|
||
|
int nsfd;
|
||
|
int rc;
|
||
|
|
||
|
if (!xioparms.experimental) {
|
||
|
Error1("option \"%s\" requires use of --experimental", nstype);
|
||
|
}
|
||
|
|
||
|
snprintf(nspath, sizeof(nspath)-1, "/run/%s/%s", nstype, nsname);
|
||
|
Info1("switching to net namespace \"%s\"", nsname);
|
||
|
nsfd = Open(nspath, O_RDONLY|O_CLOEXEC, 000);
|
||
|
if (nsfd < 0) {
|
||
|
Error2("open(%s, O_RDONLY|O_CLOEXEC): %s", nspath, strerror(errno));
|
||
|
return -1;
|
||
|
}
|
||
|
rc = Setns(nsfd, CLONE_NEWNET);
|
||
|
if (rc < 0) {
|
||
|
Error2("setns(%d, CLONE_NEWNET): %s", nsfd, strerror(errno));
|
||
|
Close(nsfd);
|
||
|
}
|
||
|
Close(nsfd);
|
||
|
return 0;
|
||
|
}
|
||
|
|
||
|
/* Sets the given namespace to that of process 1, this is assumed to be the
|
||
|
systems default.
|
||
|
Returns 0 on success, or -1 on error. */
|
||
|
int xio_reset_namespace(
|
||
|
const char *nstype)
|
||
|
{
|
||
|
char nspath[PATH_MAX];
|
||
|
int nsfd;
|
||
|
int rc;
|
||
|
|
||
|
snprintf(nspath, sizeof(nspath)-1, "/proc/1/ns/%s", nstype);
|
||
|
Info("switching back to default namespace");
|
||
|
nsfd = Open(nspath, O_RDONLY|O_CLOEXEC, 000);
|
||
|
if (nsfd < 0) {
|
||
|
Error2("open(%s, O_RDONLY|O_CLOEXEC): %s", nspath, strerror(errno));
|
||
|
return -1;
|
||
|
}
|
||
|
rc = Setns(nsfd, CLONE_NEWNET);
|
||
|
if (rc < 0) {
|
||
|
Error2("setns(%d, CLONE_NEWNET): %s", nsfd, strerror(errno));
|
||
|
Close(nsfd);
|
||
|
}
|
||
|
Close(nsfd);
|
||
|
return 0;
|
||
|
}
|
||
|
|
||
|
#endif /* WITH_NAMESPACES */
|