> Sorry for unclear question. Where is defined NS_NET? It should be CLONE_NEWNET > instead, shouldn't it? if we keep on using the unshare syscall, the answer is yes. I'm proposing a new syscall specific to namespaces (patch 10) with a new set of flags very similar to unshare. cheers, c.