[Bug 1432] Don't set inheritable flag for linux capabilities

bk: 4bb4478aP1hnbA6SexgjhAEnnP2Z4Q

diff --git a/ChangeLog b/ChangeLog
index fb35c96ad3ede574522f0fd724945ebf8e385f42..d6dbc2ce1bddd3bb42a345ff55beb2b601b9a013 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,4 @@
+* [Bug 1432] Don't set inheritable flag for linux capabilities.
 * [Bug 1483] AI_NUMERICSERV undefined in 4.2.7p20.
 * [Bug 1497] fudge is broken by getnetnum() change.
 * [Bug 1503] Auto-enabling of monitor for "restrict ... limited" wrong.

diff --git a/ntpd/ntpd.c b/ntpd/ntpd.c
index ed5dd017e39ff0ea4702f7009d01870657a203fe..c4995ec84879387c1c63f1d95b7c32bf637b9c8b 100644 (file)
--- a/ntpd/ntpd.c
+++ b/ntpd/ntpd.c
@@ -1090,8 +1090,8 @@ getgroup:
                        char *captext;
                        
                        captext = (interface_interval)
-                                     ? "cap_sys_time,cap_net_bind_service=ipe"
-                                     : "cap_sys_time=ipe";
+                                     ? "cap_sys_time,cap_net_bind_service=pe"
+                                     : "cap_sys_time=pe";
                        caps = cap_from_text(captext);
                        if (!caps) {
                                msyslog(LOG_ERR,