jail: Allow setting file capabilities in the jail

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/src/libpakfire/jail.c b/src/libpakfire/jail.c
index c81c169aedac49affcfa401807ea4f90630a4fb0..c00be6d3e2c4f4560cd25464e76cf1d479a083a5 100644 (file)
--- a/src/libpakfire/jail.c
+++ b/src/libpakfire/jail.c
@@ -970,9 +970,6 @@ static int pakfire_jail_drop_capabilities(struct pakfire_jail* jail) {
                // Deny creating any special devices
                CAP_MKNOD,
 
-               // Deny setting any capabilities
-               CAP_SETFCAP,
-
                // Deny reading from syslog
                CAP_SYSLOG,