From: Mark Huang <mlhuang@cs.princeton.edu>
Date: Wed, 3 Nov 2004 15:33:11 +0000 (+0000)
Subject: - PL2479 and PL2299 fix: no access to restricted ports if --secure is
X-Git-Tag: after-util-vserver-0_30_208-revert~219
X-Git-Url: http://git.onelab.eu/?a=commitdiff_plain;h=8a8dc8ddddfcc91c14bca22c41aa4ba3f33bbee3;p=util-vserver.git

- PL2479 and PL2299 fix: no access to restricted ports if --secure is
  passed (default in /usr/sbin/vserver)
---

diff --git a/src/chcontext.c b/src/chcontext.c
index 236e0cc..1b5275a 100644
--- a/src/chcontext.c
+++ b/src/chcontext.c
@@ -122,6 +122,7 @@ int main (int argc, char *argv[])
 	unsigned remove_cap = 0;
 	unsigned add_cap = 0;
 	unsigned long secure = (1<<CAP_LINUX_IMMUTABLE)
+		|(1<<CAP_NET_BIND_SERVICE)
 		|(1<<CAP_NET_BROADCAST)
 		|(1<<CAP_NET_ADMIN)
 		|(1<<CAP_NET_RAW)