diff options
author | 2013-07-02 10:04:54 -0700 | |
---|---|---|
committer | 2013-08-30 17:30:39 -0700 | |
commit | 160da84dbb39443fdade7151bc63a88f8e953077 (patch) | |
tree | ddc0f7993f773a610b888a75b2a00a2520c053f9 /kernel/fork.c | |
parent | namespaces: Simplify copy_namespaces so it is clear what is going on. (diff) | |
download | linux-160da84dbb39443fdade7151bc63a88f8e953077.tar.gz linux-160da84dbb39443fdade7151bc63a88f8e953077.tar.bz2 linux-160da84dbb39443fdade7151bc63a88f8e953077.zip |
userns: Allow PR_CAPBSET_DROP in a user namespace.
As the capabilites and capability bounding set are per user namespace
properties it is safe to allow changing them with just CAP_SETPCAP
permission in the user namespace.
Acked-by: Serge Hallyn <serge.hallyn@canonical.com>
Tested-by: Richard Weinberger <richard@nod.at>
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
Diffstat (limited to 'kernel/fork.c')
0 files changed, 0 insertions, 0 deletions