--- ./net/ipv4/ip_sockglue.c.tos	2006-12-28 16:12:50.000000000 +0300
+++ ./net/ipv4/ip_sockglue.c	2006-12-28 16:15:47.000000000 +0300
@@ -512,7 +512,8 @@ static int do_ip_setsockopt(struct sock 
 				val |= inet->tos & 3;
 			}
 			if (IPTOS_PREC(val) >= IPTOS_PREC_CRITIC_ECP && 
-			    !capable(CAP_NET_ADMIN)) {
+			    !capable(CAP_NET_ADMIN) &&
+			    !capable(CAP_VE_NET_ADMIN)) {
 				err = -EPERM;
 				break;
 			}