diff -NurpP --minimal linux-3.7.10-vs2.3.5.6/fs/namespace.c linux-3.7.10-vs2.3.5.6.1/fs/namespace.c --- linux-3.7.10-vs2.3.5.6/fs/namespace.c 2012-12-18 15:13:16.000000000 +0000 +++ linux-3.7.10-vs2.3.5.6.1/fs/namespace.c 2013-04-30 18:43:13.000000000 +0000 @@ -2260,7 +2260,7 @@ long do_mount(const char *dev_name, cons if (flags & MS_RDONLY) mnt_flags |= MNT_READONLY; - if (!capable(CAP_SYS_ADMIN)) + if (!vx_capable(CAP_SYS_ADMIN, VXC_DEV_MOUNT)) mnt_flags |= MNT_NODEV; flags &= ~(MS_NOSUID | MS_NOEXEC | MS_NODEV | MS_ACTIVE | MS_BORN | MS_NOATIME | MS_NODIRATIME | MS_RELATIME| MS_KERNMOUNT | diff -NurpP --minimal linux-3.7.10-vs2.3.5.6/include/uapi/vserver/context.h linux-3.7.10-vs2.3.5.6.1/include/uapi/vserver/context.h --- linux-3.7.10-vs2.3.5.6/include/uapi/vserver/context.h 2012-12-18 15:13:16.000000000 +0000 +++ linux-3.7.10-vs2.3.5.6.1/include/uapi/vserver/context.h 2013-04-30 18:43:53.000000000 +0000 @@ -69,6 +69,7 @@ #define VXC_SECURE_MOUNT 0x00010000 #define VXC_SECURE_REMOUNT 0x00020000 #define VXC_BINARY_MOUNT 0x00040000 +#define VXC_DEV_MOUNT 0x00080000 #define VXC_QUOTA_CTL 0x00100000 #define VXC_ADMIN_MAPPER 0x00200000