From d6184f9ccbe1e16b0f0c49e471b43b26f00f09fd Mon Sep 17 00:00:00 2001
From: Vishvananda Ishaya <vishvananda@gmail.com>
Date: Tue, 14 Jul 2015 15:32:35 -0700
Subject: [PATCH] Don't set permitted when effective is specified

---
 capability/syscall_linux.go | 2 --
 1 file changed, 2 deletions(-)

diff --git a/capability/syscall_linux.go b/capability/syscall_linux.go
index c18e6f6..7309674 100644
--- a/capability/syscall_linux.go
+++ b/capability/syscall_linux.go
@@ -128,8 +128,6 @@ func setVfsCap(path string, data *vfscapData) (err error) {
 		data.magic = vfsCapVer2
 		if data.effective[0] != 0 || data.effective[1] != 0 {
 			data.magic |= vfsCapFlageffective
-			data.data[0].permitted |= data.effective[0]
-			data.data[1].permitted |= data.effective[1]
 		}
 		size = vfscapDataSizeV2
 	} else {