Thanks for the patch, even though I can invoke `pasta` without any errors, I'm still getting the same permission denied error on the netns: > Couldn't open network namespace /proc/9080/ns/net: Permission denied Adding the following rule to usr.bin.passt doesn't help either: > /proc/@{pid}/ns/ r, On the contrary, setting the two usr.bin.pas* profiles to complain mode, things are back to normal so perhaps the rules are still not right?