---
name: "pam_usernet"
section: "8"
platform: "linux"
package: "libpam-net"
version: "0.4-1"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/pam_usernet"
---

# pam\_usernet(8)

join the user own network namespace at login

## NAME

pam\_usernet - join the user own network namespace at login

## SYNOPSIS

**pam\_usernet.so**

## DESCRIPTION

The pam\_usernet PAM module allow each user in *usernet* group to have their own network namespace.

If a network namespace having the same name as the username exists, pam runs the user shell in that namespace. If such a namespace does does not exist, it is created during the login process.

The system administrator can create a network namespace for each user in *usernet* group. Each namespace must be named after each username. Users will get their own network namespace at login.

When pam\_usernet is used together with a specific **[cado(1)](/cado/1.md)** configuration users can configure their own networking services. (see https://github.com/rd235/cado)

## OPTIONS

**group=***groupname*

the module operates on users in the group *groupname* instead of *usernet*.

**lodown**

leave the localhost *lo* interface in the state DOWN.

**rootshared**

Leave the root filesystem */* as shared so mounts can propagate out to the parent namespace. Warning: this feature can create security vulnerabilities if not properly used.

## RETURN VALUES

PAM\_IGNORE

User does not belong to the *usernet* group.

PAM\_ABORT

Error in retrieving the user id or in the namespace creation/joining.

PAM\_SUCCESS

Success.

## EXAMPLES

Add the following line to /etc/pam.d/sshd or /etc/pam.d/login

session   required  pam\_usernet.so

## SEE ALSO

[**pam.conf**(5)](/pam.conf/5.md), [**pam.d**(5)](/pam.d/5.md), [**pam**(7)](/pam/7.md)

## AUTHOR

pam\_usernet was written by Renzo Davoli and Eduard Caizer, University of Bologna