aboutsummaryrefslogtreecommitdiff
path: root/cap/iab.go
diff options
context:
space:
mode:
Diffstat (limited to 'cap/iab.go')
-rw-r--r--cap/iab.go5
1 files changed, 4 insertions, 1 deletions
diff --git a/cap/iab.go b/cap/iab.go
index 4da4c61..e4c2ad6 100644
--- a/cap/iab.go
+++ b/cap/iab.go
@@ -173,7 +173,10 @@ func (sc *syscaller) iabSetProc(iab *IAB) (err error) {
}
// SetProc attempts to change the Inheritable, Ambient and Bounding
-// capabilty vectors of the current process.
+// capabilty vectors of the current process. The Bounding vector strongly
+// affects the potential for setting other bits, so this function
+// carefully performs the the combined operation in the most flexible
+// order.
func (iab *IAB) SetProc() error {
scwMu.Lock()
defer scwMu.Unlock()