In capability_get(), if a capability is not found, return 0 instead of all-ones.

Returning all-ones will set all caps if an unknown cap name is passed.

diff --git a/src/capability.c b/src/capability.c
index f44b0a75168e5abd0ea3e597d77e913e38cef674..c999d6467c45eba5b392efbd4c2004da796d53a6 100644 (file)
--- a/src/capability.c
+++ b/src/capability.c
@@ -51,7 +51,7 @@ capability_get(struct CapabilityIndex *idx, const char *cap)
        if (entry != NULL && !(entry->flags & CAP_ORPHANED))
                return (1 << entry->value);
 
-       return 0xFFFFFFFF;
+       return 0;
 }
 
 unsigned int