diff --git a/net/core/sock.c b/net/core/sock.c index 31a2b79c9b38..1e49a127adef 100644 --- a/net/core/sock.c +++ b/net/core/sock.c @@ -1135,6 +1135,7 @@ int sock_setsockopt(struct socket *sock, int level, int optname, case SO_PRIORITY: if ((val >= 0 && val <= 6) || + ns_capable(sock_net(sk)->user_ns, CAP_NET_RAW) || ns_capable(sock_net(sk)->user_ns, CAP_NET_ADMIN)) sk->sk_priority = val; else