tree 3c42938d81880e5deb387521436c883a00477c6c
parent 3464bc4b439e01244c0a6b5f35e8e949e0f16096
author Tom Cherry <tomcherry@google.com> 1524266292 -0700
committer Tom Cherry <tomcherry@google.com> 1526689176 -0700

init: allow entering of network namespaces

Add the ability to enter a network namespace when launching a service.
Typical usage of this would be something similar to the below:

on fs
  exec ip netns add namespace_name

service vendor_something /vendor/...
  capabilities <lower than root>
  user not_root
  enter_namespace net /mnt/.../namespace_name

Note changes to the `ip` tool are needed to create the namespace in
the correct directory.

Bug: 73334854
Test: not yet
Change-Id: Ifa91c873d36d69db399bb9c04ff2362518a0b07d