capability: don't skip ambient caps setup if we actually have something to set

Follow-up for 7ea4392f1e

Let's not hide errors needlessly aggressively.
This commit is contained in:
Lennart Poettering 2020-04-02 17:20:47 +02:00
parent e30934c80f
commit c4b2371263

View file

@ -107,11 +107,13 @@ int capability_ambient_set_apply(uint64_t set, bool also_inherit) {
unsigned long i;
int r;
/* Add the capabilities to the ambient set (an possibly also the inheritable set) */
/* Check that we can use PR_CAP_AMBIENT or quit early. */
if (!ambient_capabilities_supported())
return 0;
/* Add the capabilities to the ambient set. */
return (set & all_capabilities()) == 0 ?
0 : -EOPNOTSUPP; /* if actually no ambient caps are to be set, be silent,
* otherwise fail recognizably */
if (also_inherit) {
caps = cap_get_proc();