POTD skeleton #99.

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>

1 files changed, 6 insertions, 1 deletions

diff --git a/src/jail.c b/src/jail.c
index cad4204..0419d34 100644
--- a/src/jail.c
+++ b/src/jail.c
@@ -253,7 +253,7 @@ static int jail_childfn(prisoner_process *ctx)
     const char *path_shell = "/bin/sh";
     int i, s, master_fd;
     int unshare_flags = CLONE_NEWUTS|CLONE_NEWPID|CLONE_NEWIPC|
-        CLONE_NEWNS|CLONE_NEWNET/*|CLONE_NEWUSER*/;
+        CLONE_NEWNS/*|CLONE_NEWUSER*/;
     //unsigned int ug_map[3] = { 0, 10000, 65535 };
     pid_t self_pid, child_pid;
     pseccomp_ctx *psc = NULL;
@@ -274,6 +274,11 @@ static int jail_childfn(prisoner_process *ctx)
     if (cgroups_activate())
         FATAL("Activating cgroups for pid %d", self_pid);
 
+    D2("Setup network namespace for pid %d", self_pid);
+    if (setup_network_namespace("default"))
+        if (switch_network_namespace("default"))
+            FATAL("Setup network namespace for pid %d", self_pid);
+
     caps_drop_dac_override(0);
     //caps_drop_all();