- PL2479 and PL2299 fix: no access to restricted ports

diff --git a/src/vsh.c b/src/vsh.c
index 0ec80a8..0fdd59c 100644 (file)
--- a/src/vsh.c
+++ b/src/vsh.c
@@ -236,6 +236,7 @@ static unsigned get_remove_cap(char *name) {
 
        remove_cap = /* NOTE: keep in sync with chcontext.c */
                (1<<CAP_LINUX_IMMUTABLE)|
+               (1<<CAP_NET_BIND_SERVICE)|
                (1<<CAP_NET_BROADCAST)|
                (1<<CAP_NET_ADMIN)|
                (1<<CAP_NET_RAW)|