net: Make CAP_NET_BIND_SERVICE per user namespace
authorEric W. Biederman <ebiederm@xmission.com>
Fri, 16 Nov 2012 03:03:12 +0000 (03:03 +0000)
committerDavid S. Miller <davem@davemloft.net>
Mon, 19 Nov 2012 01:33:37 +0000 (20:33 -0500)
commit3594698a1fb8e5ae60a92c72ce9ca280256939a7
tree54360b8a85136ebfeb10f76cfa207a23fb6035e9
parentb51642f6d77b131dc85d1d71029c3cbb5b07c262
net: Make CAP_NET_BIND_SERVICE per user namespace

Allow privileged users in any user namespace to bind to
privileged sockets in network namespaces they control.

Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv4/af_inet.c
net/ipv6/af_inet6.c
net/sctp/socket.c