> From: Bobby Eshleman <[email protected]> > > VSOCK_CMD_DEV_NETNS_SET refuses callers without CAP_NET_ADMIN in the > init user namespace. > > Add two tests: one confirms that CAP_NET_ADMIN is required even by a > privileged user and the other confirms that CAP_NET_ADMIN in an > unprivileged user ns alone is insufficient. > > CONFIG_USER_NS is needed to test the CAP_NET_ADMIN + unprivileged user > ns case. > > Signed-off-by: Bobby Eshleman <[email protected]>
Sashiko has reviewed this patch and found no issues. It looks great! -- Sashiko AI review ยท https://sashiko.dev/#/patchset/[email protected]?part=6
