diff options
Diffstat (limited to 'kernel/nsproxy.c')
-rw-r--r-- | kernel/nsproxy.c | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/kernel/nsproxy.c b/kernel/nsproxy.c index 895e3a3f2044..5aa28e219487 100644 --- a/kernel/nsproxy.c +++ b/kernel/nsproxy.c | |||
@@ -117,7 +117,7 @@ int copy_namespaces(int flags, struct task_struct *tsk) | |||
117 | 117 | ||
118 | get_nsproxy(old_ns); | 118 | get_nsproxy(old_ns); |
119 | 119 | ||
120 | if (!(flags & (CLONE_NEWNS | CLONE_NEWUTS | CLONE_NEWIPC))) | 120 | if (!(flags & (CLONE_NEWNS | CLONE_NEWUTS | CLONE_NEWIPC | CLONE_NEWUSER))) |
121 | return 0; | 121 | return 0; |
122 | 122 | ||
123 | if (!capable(CAP_SYS_ADMIN)) { | 123 | if (!capable(CAP_SYS_ADMIN)) { |
@@ -161,7 +161,8 @@ int unshare_nsproxy_namespaces(unsigned long unshare_flags, | |||
161 | { | 161 | { |
162 | int err = 0; | 162 | int err = 0; |
163 | 163 | ||
164 | if (!(unshare_flags & (CLONE_NEWNS | CLONE_NEWUTS | CLONE_NEWIPC))) | 164 | if (!(unshare_flags & (CLONE_NEWNS | CLONE_NEWUTS | CLONE_NEWIPC | |
165 | CLONE_NEWUSER))) | ||
165 | return 0; | 166 | return 0; |
166 | 167 | ||
167 | if (!capable(CAP_SYS_ADMIN)) | 168 | if (!capable(CAP_SYS_ADMIN)) |