man/man8/pam_usernet.8.html

Content-type: text/html; charset=UTF-8

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE>Man page of PAM_USERNET</TITLE>
</HEAD><BODY>
<H1>PAM_USERNET</H1>
Section: Maintenance Commands (8)<BR>Updated: August 17, 2016<BR><A HREF="#index">Index</A>
<A HREF="/#/man/index">Return to Main Contents</A><HR>

<A NAME="lbAB">&nbsp;</A>
<H2>NAME</H2>

pam_usernet - join the user own network namespace at login
<A NAME="lbAC">&nbsp;</A>
<H2>SYNOPSIS</H2>

<B>pam_usernet.so</B>
<A NAME="lbAD">&nbsp;</A>
<H2>DESCRIPTION</H2>

The pam_usernet PAM module allow each user in <I>usernet</I> group to have their own
network namespace.
<P>
If a network namespace having the same name as the
username exists, pam runs the user shell in that namespace. If such a
namespace does does not exist, it is created during the login process.
<P>
The system administrator can create a network
namespace for each user in <I>usernet</I> group. Each namespace must be named
after each username.
Users will get their own network namespace at
login.
<P>
When pam_usernet is used together with a specific <B><A HREF="/#/man/man1/cado.1.html">cado</A>(1)</B> configuration
users can configure their own networking services. (see <A HREF="https://github.com/rd235/cado)">https://github.com/rd235/cado)</A>
<P>
<A NAME="lbAE">&nbsp;</A>
<H2>OPTIONS</H2>

<P>

<B>group=</B><B></B><I>groupname</I>
<DL COMPACT><DT><DD>
the module operates on users in the group <I>groupname</I> instead of <I>newnet</I>.
</DL>

<P>

<B>lodown</B>
<DL COMPACT><DT><DD>
leave the localhost <I>lo</I> interface in the state DOWN.
</DL>

<P>

<B>rootshared</B>
<DL COMPACT><DT><DD>
Leave the root filesystem <I>/</I> as shared so mounts can propagate out to the
parent namespace. Warning: this feature can create security vulnerabilities if not
properly used.
</DL>

<P>
<A NAME="lbAF">&nbsp;</A>
<H2>RETURN VALUES</H2>

<P>

PAM_IGNORE
<DL COMPACT><DT><DD>
User does not belong to the <I>usernet</I> group.
</DL>

<P>

PAM_ABORT
<DL COMPACT><DT><DD>
Error in retrieving the user id or in the namespace creation/joining.
</DL>

<P>

PAM_SUCCESS
<DL COMPACT><DT><DD>
Success.
</DL>

<A NAME="lbAG">&nbsp;</A>
<H2>EXAMPLES</H2>

<P>

Add the following line to
/etc/pam.d/sshd
or /etc/pam.d/login
<P>
<DL COMPACT><DT><DD>
session   required  pam_usernet.so
</DL>

<P>
<A NAME="lbAH">&nbsp;</A>
<H2>SEE ALSO</H2>

<P>

<B><A HREF="/#/man/man5/pam.conf.5.html">pam.conf</A></B>(5),
<B><A HREF="/#/man/man5/pam.d.5.html">pam.d</A></B>(5),
<B><A HREF="/#/man/man7/pam.7.html">pam</A></B>(7)
<A NAME="lbAI">&nbsp;</A>
<H2>AUTHOR</H2>

<P>

pam_usernet was written by Renzo Davoli and Eduard Caizer, University of Bologna
<P>

<HR>
<A NAME="index">&nbsp;</A><H2>Index</H2>
<DL>
<DT><A HREF="#lbAB">NAME</A><DD>
<DT><A HREF="#lbAC">SYNOPSIS</A><DD>
<DT><A HREF="#lbAD">DESCRIPTION</A><DD>
<DT><A HREF="#lbAE">OPTIONS</A><DD>
<DT><A HREF="#lbAF">RETURN VALUES</A><DD>
<DT><A HREF="#lbAG">EXAMPLES</A><DD>
<DT><A HREF="#lbAH">SEE ALSO</A><DD>
<DT><A HREF="#lbAI">AUTHOR</A><DD>
</DL>
<HR>
This document was created by
<A HREF="/cgi-bin/man/man2html">man2html</A>,
using the manual pages.<BR>
Time: 15:22:08 GMT, November 27, 2023
</BODY>
</HTML>