I am trying to run a process that performs a clone() operation using a set of flags (CLONE_NEWIPC, CLONE_NEWNET, ...) that require CAP_SYS_ADMIN capability.
This should not be a problem since I am running the process as root, but for some reason, it works on a debian wheezy 3.2.0 but not on a fedora 14 2.6.32. It throws an EPERM error which according to the CLONE(2) man page, means it was run by "an unprivileged process (process without CAP_SYS_ADMIN)". Again, everything is running as root.
Any ideas why this is happening and how to fix it?