Remove capability locking feature

This isn't our job, so there is no reason to support this.

1 files changed, 0 insertions, 14 deletions

diff --git a/src/capabilities.c b/src/capabilities.c
index 415cce6..5ad2e45 100644
--- a/src/capabilities.c
+++ b/src/capabilities.c
@@ -72,17 +72,6 @@ void fastd_cap_init(fastd_context_t *ctx) {
 	try_cap(ctx, CAP_NET_RAW);
 }
 
-void fastd_cap_lock(fastd_context_t *ctx) {
-	if (prctl(PR_SET_SECUREBITS,
-		  SECBIT_KEEP_CAPS_LOCKED |
-		  SECBIT_NO_SETUID_FIXUP |
-		  SECBIT_NO_SETUID_FIXUP_LOCKED |
-		  SECBIT_NOROOT |
-		  SECBIT_NOROOT_LOCKED) < 0) {
-		pr_debug_errno(ctx, "prctl");
-	}
-}
-
 void fastd_cap_drop(fastd_context_t *ctx) {
 	cap_t caps = cap_init();
 
@@ -103,9 +92,6 @@ void fastd_cap_drop(fastd_context_t *ctx) {
 void fastd_cap_init(fastd_context_t *ctx) {
 }
 
-void fastd_cap_lock(fastd_context_t *ctx) {
-}
-
 void fastd_cap_drop(fastd_context_t *ctx) {
 }