From: Evgeny Vereshchagin <evvers@ya.ru>
Date: Thu, 29 Oct 2015 11:13:04 +0000 (+0300)
Subject: core: fix capability bounding set parsing
X-Git-Tag: v228~131^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F1713%2Fhead;p=thirdparty%2Fsystemd.git

core: fix capability bounding set parsing

bug: CapabilityBoundingSet= doesn't reset all caps
---

diff --git a/src/core/load-fragment.c b/src/core/load-fragment.c
index 8bd6a67538f..333fca46c46 100644
--- a/src/core/load-fragment.c
+++ b/src/core/load-fragment.c
@@ -1023,7 +1023,7 @@ int config_parse_bounding_set(const char *unit,
                 log_syntax(unit, LOG_ERR, filename, line, 0, "Trailing garbage, ignoring.");
 
         capability_bounding_set = invert ? ~sum : sum;
-        if (*capability_bounding_set_drop)
+        if (*capability_bounding_set_drop && capability_bounding_set)
                 *capability_bounding_set_drop = ~(~*capability_bounding_set_drop | capability_bounding_set);
         else
                 *capability_bounding_set_drop = ~capability_bounding_set;