changed inheritable capability set to the permitted one to execute firewall script with CAP_NET_ADMIN

2007-09-28 07:04:09 +00:00
parent 780050cbc3
commit 055d016b49
1 changed files with 1 additions and 2 deletions
@@ -251,8 +251,7 @@ static void drop_capabilities(private_daemon_t *this, bool full)

 	hdr.version = _LINUX_CAPABILITY_VERSION;
 	hdr.pid = 0;
-	data.effective = data.permitted = keep;
-	data.inheritable = 0;
+	data.inheritable = data.effective = data.permitted = keep;
 	
 	if (capset(&hdr, &data))
 	{