xio-namespaces.c

/* Source: xio-namespaces.c */
/* Copyright Gerhard Rieger and contributors (see file CHANGES) */
/* Published under the GNU General Public License V.2, see file COPYING */

/* This file contains Linux namespace related code */

#include "xiosysincludes.h"
#include "xioopen.h"

#include "xio-namespaces.h"

#if WITH_NAMESPACES

const struct optdesc opt_set_netns   = { "netns",      NULL, OPT_SET_NETNS,   GROUP_PROCESS, PH_INIT, TYPE_STRING, OFUNC_SET_NAMESPACE,   0, 0, 0 };


/* Set the given namespace. Requires root or the appropriate CAP_*-
   Returns 0 on success, or -1 on error. */
int xio_set_namespace(
	const char *nstype,
	const char *nsname)
{
	char nspath[PATH_MAX];
	int nsfd;
	int rc;

	if (!xioparms.experimental) {
		Error1("option \"%s\" requires use of --experimental", nstype);
	}

	snprintf(nspath, sizeof(nspath)-1, "/run/%s/%s", nstype, nsname);
	Info1("switching to net namespace \"%s\"", nsname);
	nsfd = Open(nspath, O_RDONLY|O_CLOEXEC, 000);
	if (nsfd < 0) {
		Error2("open(%s, O_RDONLY|O_CLOEXEC): %s", nspath, strerror(errno));
		return -1;
	}
	rc = Setns(nsfd, CLONE_NEWNET);
	if (rc < 0) {
		Error2("setns(%d, CLONE_NEWNET): %s", nsfd, strerror(errno));
		Close(nsfd);
	}
	Close(nsfd);
	return 0;
}

/* Sets the given namespace to that of process 1, this is assumed to be the
   systems default.
   Returns 0 on success, or -1 on error. */
int xio_reset_namespace(
	const char *nstype)
{
	char nspath[PATH_MAX];
	int nsfd;
	int rc;

	snprintf(nspath, sizeof(nspath)-1, "/proc/1/ns/%s", nstype);
	Info("switching back to default namespace");
	nsfd = Open(nspath, O_RDONLY|O_CLOEXEC, 000);
	if (nsfd < 0) {
		Error2("open(%s, O_RDONLY|O_CLOEXEC): %s", nspath, strerror(errno));
		return -1;
	}
	rc = Setns(nsfd, CLONE_NEWNET);
	if (rc < 0) {
		Error2("setns(%d, CLONE_NEWNET): %s", nsfd, strerror(errno));
		Close(nsfd);
	}
	Close(nsfd);
	return 0;
}

#endif /* WITH_NAMESPACES */