From: Eric W. Biederman <ebiederm@xmission.com>
Date: Tue, 2 Jul 2013 17:04:54 +0000 (-0700)
Subject: userns: Allow PR_CAPBSET_DROP in a user namespace.
X-Git-Tag: v3.12-rc1~106^2~3
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=160da84dbb39443fdade7151bc63a88f8e953077;p=pandora-kernel.git

userns: Allow PR_CAPBSET_DROP in a user namespace.

As the capabilites and capability bounding set are per user namespace
properties it is safe to allow changing them with just CAP_SETPCAP
permission in the user namespace.

Acked-by: Serge Hallyn <serge.hallyn@canonical.com>
Tested-by: Richard Weinberger <richard@nod.at>
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
---

Reading git-diff-tree failed