In a program I'm enumerating network namespaces by scanning
ns/net (sym) links. This program runs inside the "root" namespaces (original init) of the host itself. Normally, I need to run the scanner part as root, as otherwise I will have only limited access to other processes'
/proc/pid/ information. I would like to avoid running the scanner as root if possible, and I would like to avoid the hassle of dropping privileges.
Which Linux capability do I need to set for my scanner program so it can be run by non-root users and still see the complete
/proc/pid/ tree and read network namespace links?