[iptables PATCH 2/2] iptables-test.py: Try to unshare netns by default

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



If user did not explicitly requst to "test netnamespace path", try an
import of 'unshare' module and call unshare() to avoid killing the local
host's network by accident.

Signed-off-by: Phil Sutter <phil@xxxxxx>
---
 iptables-test.py | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/iptables-test.py b/iptables-test.py
index 52897a5d93ced..ca5efb1b6670b 100755
--- a/iptables-test.py
+++ b/iptables-test.py
@@ -366,6 +366,13 @@ def main():
                      if i.endswith('.t')]
         file_list.sort()
 
+    if not args.netns:
+        try:
+            import unshare
+            unshare.unshare(unshare.CLONE_NEWNET)
+        except:
+            print("Cannot run in own namespace, connectivity might break")
+
     for filename in file_list:
         file_tests, file_passed = run_test_file(filename, args.netns)
         if file_tests:
-- 
2.28.0




[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux