From: Lennart Poettering <lennart@poettering.net>
Date: Thu, 21 Mar 2019 11:37:30 +0000 (+0100)
Subject: capability: also cap CAP_LAST_CAP at 63
X-Git-Tag: v242-rc1~97^2~5
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=46eda043735bcab274d22b758abf533c085f42b9;p=thirdparty%2Fsystemd.git

capability: also cap CAP_LAST_CAP at 63
---

diff --git a/src/basic/capability-util.c b/src/basic/capability-util.c
index 2c17e26016e..03a6b660fb1 100644
--- a/src/basic/capability-util.c
+++ b/src/basic/capability-util.c
@@ -61,7 +61,7 @@ unsigned long cap_last_cap(void) {
         }
 
         /* fall back to syscall-probing for pre linux-3.2 */
-        p = (unsigned long) CAP_LAST_CAP;
+        p = MIN((unsigned long) CAP_LAST_CAP, 63U);
 
         if (prctl(PR_CAPBSET_READ, p) < 0) {