[Devel] [PATCH 7/7] Remove CAP_VE_* from "ve/ns: Port diff-ve-ns-allow-create-new-pid-ipc-and-utc-namespaces"

[Andrew Vagin]

Signed-off-by: Andrew Vagin <avagin at openvz.org>
---
 kernel/nsproxy.c |    3 +--
 1 files changed, 1 insertions(+), 2 deletions(-)

diff --git a/kernel/nsproxy.c b/kernel/nsproxy.c
index 9e1dda3..62aebc8 100644
--- a/kernel/nsproxy.c
+++ b/kernel/nsproxy.c
@@ -136,8 +136,7 @@ int copy_namespaces(unsigned long flags, struct task_struct *tsk)
 				CLONE_NEWPID | CLONE_NEWNET)))
 		return 0;
 
-	if (!ns_capable(user_ns, CAP_SYS_ADMIN) &&
-	    !ns_capable(user_ns, CAP_VE_SYS_ADMIN)) {
+	if (!ns_capable(user_ns, CAP_SYS_ADMIN)) {
 		err = -EPERM;
 		goto out;
 	}
-- 
1.7.1