From: Arran Cudbard-Bell <a.cudbardb@freeradius.org>
Date: Mon, 1 Jun 2020 15:35:57 +0000 (-0500)
Subject: fr_cap_net_raw: Don't return an error if the capability is already in the effective set
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b9d083b715bf91e09088e338ae33cdcdf206e8ad;p=thirdparty%2Ffreeradius-server.git

fr_cap_net_raw: Don't return an error if the capability is already in the effective set
---

diff --git a/src/lib/util/socket.c b/src/lib/util/socket.c
index e48092951cb..845e9dfcc7f 100644
--- a/src/lib/util/socket.c
+++ b/src/lib/util/socket.c
@@ -1192,6 +1192,12 @@ int fr_cap_net_raw(void)
 			goto skip_cap;
 		}
 
+		rcode = 0;
+		cap_net_raw = true;
+	/*
+	 *	It's already in the effective set
+	 */
+	} else if (state == CAP_SET) {
 		rcode = 0;
 		cap_net_raw = true;
 	}