tree 00a9703ddda483c8a9918e6a9e39d7cd3a8d659c
parent c03b3166d67ef9606fdf52c34cfd38a8bf78a4ab
author Giuseppe Scrivano <gscrivan@redhat.com> 1594975180 +0200
committer Pablo Neira Ayuso <pablo@netfilter.org> 1595589701 +0200

iptables: accept lock file name at runtime

allow users to override at runtime the lock file to use through the
XTABLES_LOCKFILE environment variable.

It allows to use iptables when the user has granted enough
capabilities (e.g. a user+network namespace) to configure the network
but that lacks access to the XT_LOCK_NAME (by default placed under
/run).

$ XTABLES_LOCKFILE=/tmp/xtables unshare -rn iptables ...

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>