commit 6f8418fa5e8a253970e317600cb963ff45fbe24e
author Serge E. Hallyn <sergeh@us.ibm.com> Thu Feb 07 11:12:31 2008 -0800
committer Andrew G. Morgan <morgan@kernel.org> Thu Feb 07 11:12:31 2008 -0800
tree 93dbf93e055db76d23a6f993f3995aa2e561fc3e
parent 5b71e2bdcfba29ce1a5097ae39eca261132b097b

Add CAP_NS_OVERRIDE (34).

Signed-off-by: Andrew G. Morgan <morgan@kernel.org>
Signed-off-by: Serge H. Hallyn <sergeh@us.ibm.com>

libcap/include/linux/capability.h

diff --git a/libcap/include/linux/capability.h b/libcap/include/linux/capability.h
index 7d50ff6..58bc24e 100644
--- a/libcap/include/linux/capability.h
+++ b/libcap/include/linux/capability.h
@@ -332,7 +332,14 @@
 
 #define CAP_MAC_ADMIN        33
 
-#define CAP_LAST_CAP         CAP_MAC_ADMIN
+/* Allow acting on resources in another namespace.  In
+   particular:
+      1. when combined with CAP_KILL, kill users in another
+         user namespace
+ */
+#define CAP_NS_OVERRIDE      34
+
+#define CAP_LAST_CAP         CAP_NS_OVERRIDE
 
 #define cap_valid(x) ((x) >= 0 && (x) <= CAP_LAST_CAP)