Hacker cannot modify iptables

[rkalyanapurdue]

The step for redirecting all traffic from 80 to 8080 fails:

sudo iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 8080

gives the error:

iptables v1.6.1: can't initialize iptables table `nat': Permission denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.

I've tested SSLStrip in plain Docker on my desktop and it works fine. Could the "privileged" tag no longer be working for the catalog?

[rkalyanapurdue]

Craig: assigning you for the moment just in case you can quickly verify re: privileged. User "sigite2" has an active "sslstrip" application demonstrating this issue...

Thanks!
Rajesh

[craig-willis]

With nds-org/ndslabs#283 the privileged setting was replaced with a securityContext that allows for finer grained controls. We apparently never updated the specs in the catalog to match.

For example:
https://github.com/nds-org/ndslabs/blob/develop/apiserver/test/services/test/full.json#L11-L26