Run imunes as non-root user
Given the availability of the setcap command we can finely tune the capabilities of IMUNES: http://linux.die.net/man/7/capabilities
Like this: setcap cap_dac_override,cap_sys_admin,cap_net_admin,cap_net_raw=ep /usr/local/bin/imunes
In combination with some file permissions in /var/run/netns and adding IMUNES to docker group it should make it possible to run IMUNES without using sudo. This would enable us to smoothly install IMUNES through distribution packages and run it from the deskop environment without asking the users to input their passwords because the package would set the capabilites on installation.
We need sudo for ip commands.
We don't need sudo for ip with the cap_net* settings