test-execute: use CAP_CHOWN instead of CAP_NET_ADMIN
CAP_NET_ADMIN is somtrimes dropped by container runtime. This changes to use CAP_CHOWN instead of CAP_NET_ADMIN, as it is less likely to be dropped.
This commit is contained in:
@@ -559,7 +559,7 @@ static void test_exec_ambientcapabilities(Manager *m) {
|
||||
return;
|
||||
}
|
||||
|
||||
if (have_effective_cap(CAP_NET_ADMIN) <= 0 ||
|
||||
if (have_effective_cap(CAP_CHOWN) <= 0 ||
|
||||
have_effective_cap(CAP_NET_RAW) <= 0) {
|
||||
log_notice("Skipping %s, this process does not have enough capabilities", __func__);
|
||||
return;
|
||||
|
||||
Reference in New Issue
Block a user