| commit | d5360895c29375a96e1eefe3568208583abd4578 | [log] [tgz] |
|---|---|---|
| author | Eric W. Biederman <ebiederm@xmission.com> | Thu Nov 15 04:26:23 2012 -0800 |
| committer | Eric W. Biederman <ebiederm@xmission.com> | Sun Nov 18 23:15:50 2012 -0800 |
| tree | e1e010ccd804f17de0779c9b099199625270e429 | |
| parent | 66bb0ad06a8e438f60b3802ddb45ccf35534c2bc [diff] |
net: Allow userns root to control tun and tap devices Allow an unpriviled user who has created a user namespace, and then created a network namespace to effectively use the new network namespace, by reducing capable(CAP_NET_ADMIN) calls to ns_capable(net->user_ns,CAP_NET_ADMIN) calls. Allow setting of the tun iff flags. Allow creating of tun devices. Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>