tree bdfe3d662dd4a42673620067f21c7b6fedd04d27
parent 50804fe3737ca6a5942fdc2057a18a8141d00141
author Eric W. Biederman <ebiederm@xmission.com> 1343722452 -0700
committer Eric W. Biederman <ebiederm@xmission.com> 1353333557 -0800

vfs: Allow chroot if you have CAP_SYS_CHROOT in your user namespace

Once you are confined to a user namespace applications can not gain
privilege and escape the user namespace so there is no longer a reason
to restrict chroot.

Acked-by: Serge Hallyn <serge.hallyn@canonical.com>
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>