# Re: \[PATCH\] capabilities: Ambient capability set V2

- From: Serge E. Hallyn \<serge@hallyn.com\>
- Date: 2015-03-07 21:35:27 
- List: linux-api
- Page: https://ratatoskr.run/linux-api/2015/03/4445733
- Thread: https://ratatoskr.run/linux-api/2015/02/4438585/t.md

```text
On Sat, Mar 07, 2015 at 09:06:46AM -0600, Christoph Lameter wrote:
> On Fri, 6 Mar 2015, Andy Lutomirski wrote:
> 
> > > christoph@fujitsu-haswell:~$ getcap ambient_test
> > >
> > > ambient_test = cap_setpcap,cap_net_admin,cap_net_raw,cap_sys_nice+eip
> >
> > I think that's right.  fI doesn't set pI.
> 
> Ok then that is the point of pI if it cannot be set?

It can be set!  Anything with CAP_SETPCAP can fill it's pI.  When
it and its children exec(), pI' = pI.
```