From 8a8dc8ddddfcc91c14bca22c41aa4ba3f33bbee3 Mon Sep 17 00:00:00 2001
From: Mark Huang <mlhuang@cs.princeton.edu>
Date: Wed, 3 Nov 2004 15:33:11 +0000
Subject: [PATCH] - PL2479 and PL2299 fix: no access to restricted ports if
 --secure is   passed (default in /usr/sbin/vserver)

---
 src/chcontext.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/chcontext.c b/src/chcontext.c
index 236e0cc..1b5275a 100644
--- a/src/chcontext.c
+++ b/src/chcontext.c
@@ -122,6 +122,7 @@ int main (int argc, char *argv[])
 	unsigned remove_cap = 0;
 	unsigned add_cap = 0;
 	unsigned long secure = (1<<CAP_LINUX_IMMUTABLE)
+		|(1<<CAP_NET_BIND_SERVICE)
 		|(1<<CAP_NET_BROADCAST)
 		|(1<<CAP_NET_ADMIN)
 		|(1<<CAP_NET_RAW)
-- 
2.43.0