tree ed598b5b9cdc2646be490d3058292562c7cc509b
parent 7905b1e16286653679b7ff9b595f3ed7de5e182f
author Tom Cherry <tomcherry@google.com> 1524266292 -0700
committer Tom Cherry <tomcherry@google.com> 1526917933 +0000

init: allow entering of network namespaces

Add the ability to enter a network namespace when launching a service.
Typical usage of this would be something similar to the below:

on fs
  exec ip netns add namespace_name

service vendor_something /vendor/...
  capabilities <lower than root>
  user not_root
  enter_namespace net /mnt/.../namespace_name

Note changes to the `ip` tool are needed to create the namespace in
the correct directory.

Bug: 73334854
Test: auto team verified
Merged-In: Ifa91c873d36d69db399bb9c04ff2362518a0b07d
Change-Id: Ifa91c873d36d69db399bb9c04ff2362518a0b07d
(cherry picked from commit aead51b418e70a49191bc0cc5b67c92c969ae699)