- PL2479 and PL2299 fix: no access to restricted ports if --secure is

  passed (default in /usr/sbin/vserver)

diff --git a/src/chcontext.c b/src/chcontext.c
index 236e0cc..1b5275a 100644 (file)
--- a/src/chcontext.c
+++ b/src/chcontext.c
@@ -122,6 +122,7 @@ int main (int argc, char *argv[])
        unsigned remove_cap = 0;
        unsigned add_cap = 0;
        unsigned long secure = (1<<CAP_LINUX_IMMUTABLE)
+               |(1<<CAP_NET_BIND_SERVICE)
                |(1<<CAP_NET_BROADCAST)
                |(1<<CAP_NET_ADMIN)
                |(1<<CAP_NET_RAW)