tree b800a8b63114b8ed561e3044f37cf8542c804954
parent 0494e2e2dfce49c6c158b6ffe09fffb23a6e1aca
author Roman Arutyunyan <arut@nginx.com> 1513699227 +0300
committer Roman Arutyunyan <arut@nginx.com> 1513699227 +0300

Fixed capabilities version.

Previously, capset(2) was called with the 64-bit capabilities version
_LINUX_CAPABILITY_VERSION_3.  With this version Linux kernel expected two
copies of struct __user_cap_data_struct, while only one was submitted.  As a
result, random stack memory was accessed and random capabilities were requested
by the worker.  This sometimes caused capset() errors.  Now the 32-bit version
_LINUX_CAPABILITY_VERSION_1 is used instead.  This is OK since CAP_NET_RAW is
a 32-bit capability (CAP_NET_RAW = 13).