test-capability: skip tests that need CAP_NET_RAW if cap is not passed

See: #19746

diff --git a/src/test/test-capability.c b/src/test/test-capability.c
index 5fa8fe242ef4ee11f2cd8a6641dbcad65c7d3451..7a781e57e4978432cb712afd5dedd31a5593ac14 100644 (file)
--- a/src/test/test-capability.c
+++ b/src/test/test-capability.c
@@ -159,9 +159,15 @@ static void test_drop_privileges_fail(void) {
 }
 
 static void test_drop_privileges(void) {
+        fork_test(test_drop_privileges_fail);
+
+        if (have_effective_cap(CAP_NET_RAW) == 0) /* The remaining two tests only work if we have CAP_NET_RAW
+                                                   * in the first place. If we are run in some restricted
+                                                   * container environment we might not. */
+                return;
+
         fork_test(test_drop_privileges_keep_net_raw);
         fork_test(test_drop_privileges_dontkeep_net_raw);
-        fork_test(test_drop_privileges_fail);
 }
 
 static void test_have_effective_cap(void) {