From a349eb10d3c3a31cd47198cbf08e4f0dfaffef1d Mon Sep 17 00:00:00 2001
From: Lennart Poettering <lennart@poettering.net>
Date: Sat, 17 May 2014 20:33:47 +0200
Subject: timesyncd: run timesyncd as unpriviliged user "systemd-timesync" (but
 still with CAP_SYS_TIME)

---
 src/shared/capability.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'src/shared/capability.c')

diff --git a/src/shared/capability.c b/src/shared/capability.c
index f8ee1c6838..b49c514009 100644
--- a/src/shared/capability.c
+++ b/src/shared/capability.c
@@ -156,7 +156,8 @@ int capability_bounding_set_drop(uint64_t drop, bool right_now) {
         r = 0;
 
 finish:
-        cap_set_proc(after_cap);
+        if (cap_set_proc(after_cap) < 0)
+                return -errno;
 
         return r;
 }
-- 
cgit v1.2.3-54-g00ecf