[Bug 1210] nftables gets confused by user namespaces when meta skuid is used

[bugzilla-daemon at netfilter.org]

https://bugzilla.netfilter.org/show_bug.cgi?id=1210

--- Comment #1 from Yves <bugz at yalis.fr> ---
I forgot to mention that the nspawn container is not a single (Docker-like)
contained process, but is instead a full Archlinux OS (minus the kernel, of
course). So:

1. the host and guest are mostly independent OSes, and each has its own IP
address, and its own nftables firewall;
2. the guest-specific nftables rules above are loaded by the in-containter
nftables.service, in the process of booting the guest Archlinux;
3. the exim user is a system user of the guest in-container Archlinux;
4. the telnet command being used to showcase the problem is run in a guest
in-container shell, by root (the container’s root).

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20180104/e00f9fb9/attachment.html>