# Re: \[PATCH\] capabilities: Ambient capability set V1

- From: Serge Hallyn \<hidden\>
- Date: 2015-02-23 18:16:04 
- List: linux-api
- Page: https://ratatoskr.run/linux-api/2015/02/4435847
- Thread: https://ratatoskr.run/linux-api/2015/02/4426512/t.md

```text
Quoting Christoph Lameter (cl@linux.com):
> On Mon, 23 Feb 2015, Serge E. Hallyn wrote:
> 
> > > I do not see a problem with dropping privilege since the ambient set
> > > is supposed to be preserved across a drop of priviledge.
> >
> > Because you're tricking the program into thinking it has dropped
> > the privilege, when in fact it has not.
> 
> So the cap was dropped from the cap perm set but it is still active
> in the ambient set?

Right, and the legacy program doesn't know to check the new set.
```