diff --git a/security/commoncap.c b/security/commoncap.c index c44b6fe6648e6945518db1a1be1c66b43131b875..9fccf71b2b62a854178e411dcbd76d3ba6b7c12e 100644 --- a/security/commoncap.c +++ b/security/commoncap.c @@ -824,7 +824,7 @@ int cap_task_setnice(struct task_struct *p, int nice) */ static long cap_prctl_drop(struct cred *new, unsigned long cap) { - if (!capable(CAP_SETPCAP)) + if (!ns_capable(current_user_ns(), CAP_SETPCAP)) return -EPERM; if (!cap_valid(cap)) return -EINVAL;