I believe once you create a user namespace (https://lwn.net/Articles/528078/ https://lwn.net/Articles/528078/) you can then create the other kinds of namespaces

I believe once you create a user namespace (https://lwn.net/Articles/528078/ https://lwn.net/Articles/528078/) you can then create the other kinds of namespaces (mount, process, etc.) without requiring privileges outside of your user namespace. LWN ran a great series on namespaces recently: part 5 (https://lwn.net/Articles/532593/ https://lwn.net/Articles/532593/) covers user namespaces.