On Tue, Mar 26, 2013 at 02:50:22PM +0400, Andrew Vagin wrote: > > > > current_ns_mask = 0 for check mode. > > I think we can set current_ns_mask = CLONE_NEWNET for check mode. Indeed. I'll update the patch.