mirror of
https://github.com/systemd/systemd
synced 2024-10-06 16:21:34 +00:00
capability: don't skip ambient caps setup if we actually have something to set
Follow-up for 7ea4392f1e
Let's not hide errors needlessly aggressively.
This commit is contained in:
parent
e30934c80f
commit
c4b2371263
|
@ -107,11 +107,13 @@ int capability_ambient_set_apply(uint64_t set, bool also_inherit) {
|
|||
unsigned long i;
|
||||
int r;
|
||||
|
||||
/* Add the capabilities to the ambient set (an possibly also the inheritable set) */
|
||||
|
||||
/* Check that we can use PR_CAP_AMBIENT or quit early. */
|
||||
if (!ambient_capabilities_supported())
|
||||
return 0;
|
||||
|
||||
/* Add the capabilities to the ambient set. */
|
||||
return (set & all_capabilities()) == 0 ?
|
||||
0 : -EOPNOTSUPP; /* if actually no ambient caps are to be set, be silent,
|
||||
* otherwise fail recognizably */
|
||||
|
||||
if (also_inherit) {
|
||||
caps = cap_get_proc();
|
||||
|
|
Loading…
Reference in a new issue