]> The Tcpdump Group git mirrors - tcpdump/commit
Make sure to init capng before dropping root. 422/head
authorTommy Beadle <[email protected]>
Tue, 27 Jan 2015 18:32:14 +0000 (13:32 -0500)
committerTommy Beadle <[email protected]>
Tue, 27 Jan 2015 18:32:14 +0000 (13:32 -0500)
commitae7f445e458e36e2db00c270febc8066d62b784c
treeecf948b4423c4297d512fc4fac27ea287fb7fe19
parent5520a233cfe9b0493f0a19d47f818e5ebf4aa8e0
Make sure to init capng before dropping root.

capng_clear needs to be called before capng_change_id can be called within
droproot.  Otherwise, an (unusable) error message is output: "error : ret -1".

This also fixes the dropping of the CAP_SETGID capability.  Previously,
CAP_SETUID was being dropped twice.
tcpdump.c