diff options
| author |   Eric W. Biederman <ebiederm@xmission.com> | 2012-11-18 21:34:11 +0000 |
|---|---|---|
| committer |   David S. Miller <davem@davemloft.net> | 2012-11-19 14:15:54 -0500 |
| commit | c260b7722f8c21963d0f0347f7fc203da9ee1a6b (patch) | |
| tree | 8d42f13a5cedbcd5d442d6f02e132f9a65372e7a /drivers/net/ethernet/dnet.c | |
| parent | net: Make CAP_NET_BIND_SERVICE per user namespace (diff) | |
| download | wireguard-linux-c260b7722f8c21963d0f0347f7fc203da9ee1a6b.tar.xz wireguard-linux-c260b7722f8c21963d0f0347f7fc203da9ee1a6b.zip | |
net: Allow userns root to control tun and tap devices
Allow an unpriviled user who has created a user namespace, and then
created a network namespace to effectively use the new network
namespace, by reducing capable(CAP_NET_ADMIN) calls to
ns_capable(net->user_ns,CAP_NET_ADMIN) calls.
Allow setting of the tun iff flags.
Allow creating of tun devices.
Allow adding a new queue to a tun device.
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
Acked-by: Serge Hallyn <serge.hallyn@canonical.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'drivers/net/ethernet/dnet.c')
0 files changed, 0 insertions, 0 deletions