fixup! Make setuid + no-unprivileged user namespaces work

containers · May 24, 2016 · df4ae62 · df4ae62
1 parent 2bdd130
commit df4ae62
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/bubblewrap.c b/bubblewrap.c
@@ -359,7 +359,7 @@ do_init (int event_fd, pid_t initial_pid)
 }
 
 /* low 32bit caps needed */
-#define REQUIRED_CAPS_0 (CAP_TO_MASK (CAP_SYS_ADMIN) | CAP_TO_MASK (CAP_SYS_CHROOT) | CAP_TO_MASK (CAP_SETUID) | CAP_TO_MASK (CAP_SETGID))
+#define REQUIRED_CAPS_0 (CAP_TO_MASK (CAP_SYS_ADMIN) | CAP_TO_MASK (CAP_SYS_CHROOT) | CAP_TO_MASK (CAP_NET_ADMIN) | CAP_TO_MASK (CAP_SETUID) | CAP_TO_MASK (CAP_SETGID))
 /* high 32bit caps needed */
 #define REQUIRED_CAPS_1 0