networking restrictions

Hi,

Looks like it touches the restrictions of per net_ns socket creation/usage:

https://lwn.net/Articles/368730/

However, I want to implement it as a cgroup policy similar to device creation/usage restriction. AFAICS, cgroup was not suggested in the topic.

Thanks,

Vasiliy