]> git.ipfire.org Git - thirdparty/systemd.git/commit
capability-util: Ignore unknown capabilities instead of aborting
authorDaan De Meyer <daan.j.demeyer@gmail.com>
Mon, 17 Mar 2025 11:26:46 +0000 (12:26 +0100)
committerDaan De Meyer <daan.j.demeyer@gmail.com>
Wed, 19 Mar 2025 09:01:19 +0000 (10:01 +0100)
commitf49b7404b2a49efb8b76afea27f355cade3da6dc
treed38d65950a26c8ab632052abc689aadfe7d9c4b6
parent87ddf5188b53a04a08be090b144a8b87a8e44b1b
capability-util: Ignore unknown capabilities instead of aborting

capability_ambient_set_apply() can be called with capability sets
containing unknown capabilities. Let's not crash when this is the
case but instead ignore the unknown capabilities.

This fixes a crash when running the following command:

"systemd-run -p "AmbientCapabilities=~" --wait --pipe id"

Fixes d5e12dc75e0e356c62e514e9c347efb200fe60e0
src/basic/capability-util.c