From c97f33e1fa6d4b927a79d6a4695ed5ac342a6883 Mon Sep 17 00:00:00 2001
From: DreamConnected <1487442471@qq.com>
Date: Sat, 24 Jan 2026 10:09:45 +0800
Subject: [PATCH] src/confile: fix values of lxc.cap.keep and lxc.cap.drop

Signed-off-by: DreamConnected <1487442471@qq.com>
---
 src/lxc/confile.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/src/lxc/confile.c b/src/lxc/confile.c
index 7163cd1b2..b313114ae 100644
--- a/src/lxc/confile.c
+++ b/src/lxc/confile.c
@@ -4309,6 +4309,9 @@ static int get_config_cap_drop(const char *key, char *retv, int inlen,
 	int len, fulllen = 0;
 	struct cap_entry *cap;
 
+	if (c->caps.keep)
+		return fulllen;
+
 	if (!retv)
 		inlen = 0;
 	else
@@ -4327,6 +4330,9 @@ static int get_config_cap_keep(const char *key, char *retv, int inlen,
 	int len, fulllen = 0;
 	struct cap_entry *cap;
 
+	if (!c->caps.keep)
+		return fulllen;
+
 	if (!retv)
 		inlen = 0;
 	else
-- 
2.47.3