--- linux-privs/fs/file_cap.c~  Mon Apr 14 20:29:51 1997
+++ linux-privs/fs/file_cap.c   Wed Apr 16 21:59:50 1997
@@ -298,6 +298,10 @@
        struct file *f;
        struct inode *inode;
 
+       /* permitted to set capabilities? */
+       if (!capable(CAP_SETFCAP))
+               return -EPERM;
+
        if (fd >= NR_OPEN || !(f=current->files->fd[fd])
            || !(inode=f->f_inode))
                return -EBADF;