Comment 0 for bug 1864186

A recent patch[1] updated rootwrap filters so that ping may be used within a network namespace. The issue is that now all ip netns commands get altered, the "ip" command being replaced with "ping":
http://paste.openstack.org/raw/789845/

In particular, this seems to affect the IpNetnsExecFilter filter.

[1] Ie5cbc0dcc76672b26cd2605f08cfd17a30b4c905