]> The Tcpdump Group git mirrors - tcpdump/commit
Merge pull request #422 from tbeadle/capng_changes
authorGuy Harris <[email protected]>
Tue, 27 Jan 2015 19:38:31 +0000 (11:38 -0800)
committerGuy Harris <[email protected]>
Tue, 27 Jan 2015 19:38:31 +0000 (11:38 -0800)
commit913899bcbfbf37808b659b88518c6a29df89339a
treeecf948b4423c4297d512fc4fac27ea287fb7fe19
parent5520a233cfe9b0493f0a19d47f818e5ebf4aa8e0
parentae7f445e458e36e2db00c270febc8066d62b784c
Merge pull request #422 from tbeadle/capng_changes

Make sure to init capng before dropping root.

capng_clear needs to be called before capng_change_id can be called within
droproot. Otherwise, an (unusable) error message is output: "error : ret -1" and it fails to drop root privileges.

This also fixes the dropping of the CAP_SETGID capability. Previously,
CAP_SETUID was being dropped twice.