net/core/scm.c: target capable() calls to user_ns owning the net_ns The uid/gid comparisons don't have to be pulled out. This just seemed more easily proved correct. Signed-off-by: Serge E. Hallyn <serge.hallyn@canonical.com> Cc: Eric W. Biederman <ebiederm@xmission.com>