It eliminates the potential for many false negatives.
1.  Use cap_compare to compare capability sets instead of comparing the far less reliable text representations.
2.  pI' tests were failing bc I started with empty pI. Fill pI before those tests.
3.  Check for libcap-2.11 or later (by checking for cap_compare()).
Signed-off-by: Serge Hallyn <serue@us.ibm.com>
4 files changed