From: Guy Harris <guy@alum.mit.edu>
Date: Tue, 27 Jan 2015 19:38:31 +0000 (-0800)
Subject: Merge pull request #422 from tbeadle/capng_changes
X-Git-Tag: tcpdump-4.7.2~1^2~41
X-Git-Url: https://git.tcpdump.org/tcpdump/commitdiff_plain/913899bcbfbf37808b659b88518c6a29df89339a

Merge pull request #422 from tbeadle/capng_changes

Make sure to init capng before dropping root.

capng_clear needs to be called before capng_change_id can be called within
droproot. Otherwise, an (unusable) error message is output: "error : ret -1" and it fails to drop root privileges.

This also fixes the dropping of the CAP_SETGID capability. Previously,
CAP_SETUID was being dropped twice.
---

913899bcbfbf37808b659b88518c6a29df89339a