Re: capable_bpf_net_admin()

[Maciej Żenczykowski <zenczykowski@xxxxxxxxx>]

Ok so I think

> +       if (is_net_admin_prog_type(type) && !capable(CAP_NET_ADMIN))
> +               return -EPERM;

should be

> +       if (is_net_admin_prog_type(type) && !capable(CAP_NET_ADMIN) && !capable(CAP_SYS_ADMIN))
> +               return -EPERM;

and presumably similar change just below that for perfmon.