Re: [PATCH] net: change capability used by socket options IP{,V6}_TRANSPARENT

From: Maciej Żenczykowski <redacted>
Date: Wed, 19 Oct 2011 20:32:31 -0700

Are you okay with the patch without any warnings or deprecation markings?
Or are you against opening up CAP_NET_RAW to this in general?

I don't see any real benefit.

If it has been decided that you can't create a new capability for
tproxy, so that tasks can be segregated out of these more powerful
networking capability levels, I simply don't see the point.

A process with CAP_NET_RAW can spit whatever crap they want onto the
network, and receive all packets with impunity.

I can't see what this buys us at all, sorry.