diff options
author | Julian Orth <ju.orth@gmail.com> | 2018-09-11 20:14:55 +0200 |
---|---|---|
committer | Julian Orth <ju.orth@gmail.com> | 2018-12-17 15:39:45 +0100 |
commit | 21e5f1bcc352af8a2ed8b4212872688d214ae464 (patch) | |
tree | 6e2a9c46e38e5829f49fc7be39943b5cffc6e2e2 /src/tools/man/wg.8 | |
parent | tools: add framework for shared options (diff) | |
download | wireguard-monolithic-historical-21e5f1bcc352af8a2ed8b4212872688d214ae464.tar.xz wireguard-monolithic-historical-21e5f1bcc352af8a2ed8b4212872688d214ae464.zip |
tools: allow specifying the device namespace
The user can now use
wg --netns <pid|file-path> <subcommand>
to specify the network namespace in which wg should act. This sets the
attribute WGDEVICE_A_DEV_NETNS_PID or WGDEVICE_A_DEV_NETNS_FD.
In the case of
wg --netns <pid|file-path> show all
we have to try to enter the network namespace because the kernel
interface does not allow us to list devices in a network namespace
referenced by pid or fd. Since entering a network namespace requires
CAP_SYS_ADMIN in the current user namespace and the target user
namespace, this is almost useless. TODO: Add the missing functionality
to the kernel.
Diffstat (limited to 'src/tools/man/wg.8')
0 files changed, 0 insertions, 0 deletions