Re: [PATCH net-next ] net: Allow userns root to control tun and tap devices

From: "Serge E. Hallyn" <redacted>
Date: Mon, 19 Nov 2012 14:23:31 +0000

Quoting Eric W. Biederman (ebiederm-aS9lmoZGLiVWk0Htik3J/w@public.gmane.org):

quoted

Allow an unpriviled user who has created a user namespace, and then
created a network namespace to effectively use the new network
namespace, by reducing capable(CAP_NET_ADMIN) calls to
ns_capable(net->user_ns,CAP_NET_ADMIN) calls.

Allow setting of the tun iff flags.
Allow creating of tun devices.
Allow adding a new queue to a tun device.

Acked-by: Serge Hallyn <redacted>

Applied.