X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=fs%2Fnamespace.c;h=fa8b30e28a242a9b3eccc6108595e3589cea6968;hb=d46bc780027c5439db9f72d42c0732775b53925a;hp=dfeac2193b69376089825d4b5208620e5a4096d8;hpb=a8e794ca871505c8ea96cc102f4ad555c5231d7f;p=linux-2.6.git

diff --git a/fs/namespace.c b/fs/namespace.c
index dfeac2193..fa8b30e28 100644
--- a/fs/namespace.c
+++ b/fs/namespace.c
@@ -691,7 +691,7 @@ static int do_add_mount(struct nameidata *nd, char *type, int flags,
 		return -EINVAL;
 
 	/* we need capabilities... */
-	if (!capable(CAP_SYS_ADMIN))
+	if (!capable(CAP_SYS_ADMIN) && !vx_ccaps(VXC_SECURE_MOUNT))
 		return -EPERM;
 
 	mnt = do_kern_mount(type, flags, name, data);