[Bug 300043] linux: prctl PR_CAP_AMBIENT and PR_GET_SECUREBITS unsupported, PR_CAPBSET_READ always EINVAL

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=300043

            Bug ID: 300043
           Summary: linux: prctl PR_CAP_AMBIENT and PR_GET_SECUREBITS
                    unsupported, PR_CAPBSET_READ always EINVAL
           Product: Base System
           Version: 16.0-CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: rbranco@suse.com

To reproduce:

$ sudo podman run --rm -it --os=linux docker.io/library/alpine
# apk add libcap
...
# capsh --print
Current: =
Bounding set = <unsupported>
Ambient set = <unsupported>
Current IAB: 
Securebits: 037777777777/0xffffffff/32'b11111111111111111111111111111111
(no-new-privs=0)
 secure-noroot: yes (locked)
 secure-no-suid-fixup: yes (locked)
 secure-keep-caps: yes (locked)
uid=0(root) euid=0(root)
gid=0(root)
groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel),11(floppy),20(dialout),26(tape),27(video)
Guessed mode: NOPRIV (1)

On dmesg you can see lots of lines like:
linux: jid 1 pid 96611 (capsh): unsupported prctl option 27
linux: jid 1 pid 96611 (capsh): unsupported prctl option 47

-- 
You are receiving this mail because:
You are the assignee for the bug.