core: fix capability bounding set parsing

bug: CapabilityBoundingSet= doesn't reset all caps
This commit is contained in:
Evgeny Vereshchagin 2015-10-29 14:13:04 +03:00
parent a8107a54bd
commit 661b37b05b

View file

@ -1023,7 +1023,7 @@ int config_parse_bounding_set(const char *unit,
log_syntax(unit, LOG_ERR, filename, line, 0, "Trailing garbage, ignoring.");
capability_bounding_set = invert ? ~sum : sum;
if (*capability_bounding_set_drop)
if (*capability_bounding_set_drop && capability_bounding_set)
*capability_bounding_set_drop = ~(~*capability_bounding_set_drop | capability_bounding_set);
else
*capability_bounding_set_drop = ~capability_bounding_set;