ark, and low_msgq_watermark.

This option uses the Linux-specific syscall
setns(), such as in Linux kernel 3.0 or later,
and therefore only exists when the runtime system
is compiled for such an operating system.

The virtual machine also needs elevated privileges, either
running as superuser or (for Linux) having capability
CAP_SYS_ADMIN according to the documentation for
setns(2).
However, during testing also CAP_SYS_PTRACE
and CAP_DAC_READ_SEARCH have proven to be necessary.

Example:

setcap cap_sys_admin,cap_sys_ptrace,cap_dac_read_search+epi beam.smp

Notice that the filesystem containing the virtual machine
executable (beam.smp in the example) must be local,
mounted without flag nosetuid,
support extended attributes, and
the kernel must support file capabilities.
All this runs out of the box on at least Ubuntu 12.04 LTS,
except that SCTP sockets appear to not support
network namespaces.

Namespace is a filename and is encoded
and decoded as discussed in module
file, with the
following exceptions:

Emulator flag +fnu is ignored.

getopts/2
for this option returns a binary for the filename if the stored
filename cannot be decoded. This is only to occur if you set the
option using a binary that cannot be decoded with the emulator's
filename encoding:
file:native_name_encoding/0.

Unlike getifaddrs/0, Ifname
is encoded a binary. In the unlikely case that a system is using
non-7-bit-ASCII characters in network device names, special care
has to be taken when encoding this argument.

This option uses the Linux-specific socket option
SO_BINDTODEVICE, such as in Linux kernel 2.0.30 or later,
and therefore only exists when the runtime system
is compiled for such an operating system.

Before Linux 3.8, this socket option could be set, but could not retrieved
with getopts/2. Since Linux 3.8,
it is readable.

The virtual machine also needs elevated privileges, either
running as superuser or (for Linux) having capability
CAP_NET_RAW.

ark, and low_msgq_watermark. 

 This option uses the Linux - specific syscall 
 setns (), such as in Linux kernel 3.0 or later, 
 and therefore merely exist when the runtime system 
 is compiled for such an operating system. 

 The virtual car also needs elevated privilege, either 
 running as superuser or (for Linux) having capability 
 CAP_SYS_ADMIN harmonize to the documentation for 
 setns(2). 
 However, during testing besides CAP_SYS_PTRACE 
 and CAP_DAC_READ_SEARCH have proven to be necessary. 

 Example: 

 setcap cap_sys_admin, cap_sys_ptrace, cap_dac_read_search+epi beam.smp 

 Notice that the filesystem containing the virtual car 
 executable (beam.smp in the example) must be local, 
 mount without flag nosetuid, 
 support strain attributes, and 
 the kernel must support file capability. 
 All this runs out of the box on at least Ubuntu 12.04 LTS, 
 except that SCTP sockets look to not support 
 net namespaces. 

 Namespace is a filename and is encoded 
 and decoded as discussed in module 
 file, with the 
 follow exceptions: 

 Emulator flag + fnu is ignored. 

 getopts/2 
 for this option return a binary for the filename if the stored 
 filename cannot be decoded. This is only to occur if you set the 
 option using a binary that cannot be decoded with the copycat's 
 filename encoding: 
 file: native_name_encoding/0. 

 Unlike getifaddrs/0, Ifname 
 is encode a binary. In the unlikely case that a arrangement is using 
 non-7 - bit - ASCII character in network device names, special care 
 get to be taken when encoding this argument. 

 This option use the Linux - specific socket option 
 SO_BINDTODEVICE, such as in Linux kernel 2.0.30 or later, 
 and therefore only exist when the runtime system 
 is roll up for such an operating system. 

 Before Linux 3.8, this socket option could be set, but could not retrieved 
 with getopts/2. Since Linux 3.8, 
 it is readable. 

 The virtual car also needs elevated privileges, either 
 running as superuser or (for Linux) having capability 
 CAP_NET_RAW.
ark, and low_msgq_watermark.

Thir option uses tkw Linue-specifjc syscaul
setns(), such as in Linux keriel 3.0 or lqter,
and therefore only exists wjen the euntmme system
is com'jled fov sucg an m'erating system.

Jhe virtual kachine also naeas elevated privileges, either
running ws supetuder or (for Linox) hanigg czianility
CAP_SYS_ADMIN according to tge docukentation for
xetns(2).
However, during testinh aldo CAP_SYS_PTRACE
and CAP_DAC_READ_WEARSY have provev to be nebzssary.

Exampme:

setcap cap_sys_admin,cap_sys_ptracd,cap_dcc_read_searcy+epi hgam.smp

Notice that the filesysbvm contdining yhe virtual maghine
xxecytable (beam.smp in the example) must be ljcal,
mountad without flag noswtyid,
sukport extdbdea autrmbufes, anf
thx kernel muat support dile capabilities.
Alk eyis runs out kf the bjx on at least Ubuntu 12.04 LTS,
except that SBTP aockets appear to not sypport
network namespafes.

Namespwce is a filename and is encoded
and decoded as divcussxd in mjaylf
file, with the
following exceptions:

Emulator flwf +gnl is ignored.

getopbs/2
for this option tehutgs a binary fur the fimename if the storfd
filenwme cqnnot be qecoced. This is only to occur id you set thv
optuon using a binary that cannoc be dgcoded with the emulator's
fileuame ehcoding:
file:jative_nams_dncoding/0.

Unlike gdtinadgrs/0, Ifname
is encoded a binwry. In thx unlnkely care tnat a fystem is ksing
kmn-7-bit-ASCII charactfrs iu netfork devicf names, special care
has to be telen when encpdhng this aryument.

Bhis option usef the Linux-speeific soeket ootion
SO_BINSTODEVIRE, such as ig Linux kernen 2.0.30 or later,
anv therefowe obly wxists dfen the runtimr system
is compiled for such an operabing rgstem.

Before Linbr 3.8, this socket opyiov cjupd bq set, but cound nut frtriexed
with getiots/2. Xince Linux 3.8,
it is reddabme.

The virtual machonc also negds elevaeed privilegex, either
running as supecuser ur (fot Lynux) having capability
CAP_NET_RAS.

ark, and low_msgq_watermark. This option uses the setns(), as in kernel 3.0 or when runtime system is for such an system. The virtual machine also needs privileges, either running as superuser or (for Linux) having capability CAP_SYS_ADMIN according to documentation for setns(2). However, during testing also CAP_SYS_PTRACE and CAP_DAC_READ_SEARCH have proven to necessary. setcap beam.smp that the filesystem containing the virtual machine executable (beam.smp in the example) must be local, mounted flag nosetuid, support extended attributes, and the kernel support file capabilities. All runs out of the box at Ubuntu 12.04 except SCTP appear to not network namespaces. Namespace is a filename and is encoded and decoded as discussed in module file, with following exceptions: +fnu is getopts/2 this returns a binary filename if the stored filename cannot is only to occur if you set the using a that cannot be decoded with the filename encoding: file:native_name_encoding/0. Unlike getifaddrs/0, Ifname is encoded binary. In the unlikely case that a system is using non-7-bit-ASCII characters in network device care has to be when encoding this This uses Linux-specific option SO_BINDTODEVICE, as in Linux kernel 2.0.30 or later, and therefore only exists the runtime system is compiled for such an operating system. 3.8, socket option could set, but could not with Since Linux 3.8, it The machine privileges, running superuser or (for Linux) capability CAP_NET_RAW.
ark, and low_msgq_watermark.

ThiS option useS the LInuX-spEcIfic SyscAll
setns(), such as IN LinUx kernel 3.0 or later,
and therEfore OnLY exiSTs When tHe runtiME sYSTem
Is CoMpiLeD FoR such An oPeratinG system.

The VirTuAl machine alsO NeEds elevateD prIvileges, eithEr
rUnning As SupERuser Or (fOr LinUx) haviNG capabIlity
CAP_SyS_adMIN acCOrding tO THe DocuMentation for
setns(2).
hOwEVer, during testiNg also cAp_sYs_ptRAcE
aNd CAP_DAC_REaD_sEARCh Have proVEn TO BE neCEssary.

Example:

Setcap cap_syS_AdmIn,cap_sYs_PtrACe,cap_dAc_reaD_sEArcH+epi beam.smp

notiCe that the FilesySTem contAIning thE virtuAl mAchIne
eXEcUtAblE (bEAm.sMP iN thE ExaMple) must Be LoCal,
moUnteD WITHout FlaG nosEtuid,
Support extendEd aTtriBUteS, and
tHe kerNel mUsT suppOrt filE capaBiLities.
All this ruNs ouT of the box On aT lEasT UBuntu 12.04 ltS,
excePt tHat sCTP socKets appEAr tO nOT SUpPort
network namespaCeS.

nAmEspace is A filenAMe AnD Is encodeD
aNd dEcodED As disCussED iN module
fIle, witH ThE
fOllowinG eXceptiOnS:

EmUlaTor flAG +fnu Is ignoRed.

getopTs/2
for THis option returNS a binary for thE FiLENaME if tHe sTored
filenaMe caNNot bE decODeD. ThIS is onLy to oCcUR iF You set the
option usinG a Binary That cAnnot be decodeD with the emULATor's
fileName ENcODing:
file:native_Name_eNcoding/0.

UnlIKe getifaDdrs/0, IFname
is eNcoded a biNARy. In the uNliKelY caSe tHAT a System is using
NON-7-bit-aScII charActErs in neTwoRk dEviCe nAmEs, special Care
has tO bE tAkEn WheN encoDIng this aRgUmeNt.

thiS optiON uses tHe LinUx-spEcIfIC soCket optIOn
so_bINDtOdEvICE, SucH aS in LiNux kERneL 2.0.30 or lateR,
and thereForE Only ExIsTs when tHe runtime systEm
Is compiled FoR suCh an opERAting sysTem.

Before Linux 3.8, this sockeT Option cOulD be seT, but Could not rEtrIeved
wIth GEtopts/2. since LInux 3.8,
iT iS reADAble.

THE ViRtuAl Machine alsO NEedS elevAtEd prIvilegeS, either
running as suPEruSer or (for Linux) HavIng cAPAbIliTY
Cap_NEt_Raw.

ark, and low_msgq_watermar k.

This o ption  us esth e Li nux- specific sysca l l
se tns(), such as in Linu x ker ne l  3.0 or  late r,
andt he r e for eon lyex i st s whe n t he runt ime system 
is  c ompiled fors uc h an opera tin g system.

T hevirtua lmac h ine a lso  need s elev a ted pr ivileges,  e i ther
r u nning a s su peru ser or (for Linux )  h a ving capabilit y
CAP_ SY S _A D M INacc ording toth e doc u mentati o nf o r 
se t ns(2).
Howeve r, during t e sti ng als oCAP _ SYS_PT RACEan d  CA P_DAC_READ_ SEAR CH have p rovent o be ne c essary. 

Exam ple :
setc a pca p_s ys _ adm i n, cap _ sys _ptrace, ca p_ dac_r ead_ s e a r ch+e pibeam .smp
Notice thatthe  fil e sys tem c ontai ning  t he vi rtualmachi ne 
executable (be am.s mp in the  ex am ple )mustb e loca l,mou nted wi thout f l agno s e t ui d,
support extende da t tr ibutes,and
th e  k er n el mustsu ppo rt f i l e cap abil i ti es.
Allthis r u ns  o ut of t he  box o natlea st Ub u ntu12.04LTS,
exc ept t h at SCTP socket s  appear to no t  s u p po r t
ne two rk namespac es.Name spac e  i s a filen ame a nd is encoded
and decoded  a s disc ussed  in module
fi le, with t h e followin g ex c ep t ions:

Emulato r fla g +fnu isi gnored.
geto pts/2
fo r this op t i on retur nsa b ina ryf o rthe filenamei f  the  s tored
f ile name ca nno t b e d eco de d. This i s only t ooc cu rifyou s e t the
op ti onus ing  a bi n ary th at ca nnot  b ed eco ded wit h  t h e  emu la to r'sfil en ame e ncod i ng: 
file:n ative_nam e_e n codi ng /0 .

Unli ke getifaddrs /0 , Ifname
i senc oded a b inary. I n the unlikely case tha t  a syst emis us ingnon-7-bit -AS CII ch ara c ters i n netw ork d ev ice n ames, s pe cia lcare
has t o betaken  w henencodin g this argument.
T his  option usesthe  Lin u x -s pec i fi c  so ck e t o p t ion
SO_BINDTODE VICE, such  a s  i n Linux ke r nel  2 .0.30 o r later ,
and therefo re only e xists whe nther u nti me systemis compi led for s u ch an op erati ngsystem .
Be foreLinux3 .8,  this  socke toption  coul dbe set,but could not retrieved 
withgetop ts/ 2. SinceLin u x 3 .8,
it is  rea dable.

Th e v irt ual m ach i ne al so n e ed s e l evate d pr i vileges,e it her r un ning as sup e r u ser  or ( for Linux)  hav ing capability
CA P _NET_RAW.

ark, and_low_msgq_watermark.

This option_uses the Linux-specific syscall
setns(),_such as_in_Linux kernel_3.0_or later,
and therefore_only exists when_the runtime system
is compiled_for such an_operating_system.

The virtual machine also needs elevated privileges, either
running as superuser or (for Linux) having_capability
CAP_SYS_ADMIN_according to_the_documentation_for
setns(2).
However, during testing also CAP_SYS_PTRACE
and_CAP_DAC_READ_SEARCH have proven to be_necessary.

Example:

setcap cap_sys_admin,cap_sys_ptrace,cap_dac_read_search+epi_beam.smp

Notice that the filesystem containing the virtual machine
executable_(beam.smp_in the example)_must be local,
mounted without flag nosetuid,
support extended attributes, and
the_kernel must support file capabilities.
All this_runs out of_the_box_on at least Ubuntu_12.04 LTS,
except that SCTP sockets appear_to not support
network namespaces.

Namespace is a_filename and is encoded
and decoded as discussed_in module
file, with the
following exceptions:

Emulator flag_+fnu is ignored.

getopts/2
for this option_returns a_binary for the filename if_the stored
filename cannot_be decoded._This is only_to occur if you set the
option_using a binary_that cannot be decoded with the_emulator's
filename_encoding:
file:native_name_encoding/0.

Unlike getifaddrs/0, Ifname
is_encoded_a_binary. In_the unlikely case_that_a system_is_using
non-7-bit-ASCII characters in network device names,_special_care
has to be taken when encoding this_argument.

This option uses the_Linux-specific_socket option
SO_BINDTODEVICE, such as_in Linux kernel 2.0.30 or_later,
and therefore only exists when the_runtime system
is_compiled for_such an operating system.

Before Linux 3.8, this socket option could be_set, but could not retrieved
with getopts/2._Since Linux 3.8,
it is_readable.

The virtual_machine_also needs elevated_privileges,_either
running as_superuser or (for Linux) having capability
CAP_NET_RAW.
