From de845d521d59568afcbbe150e846479f9f93820b Mon Sep 17 00:00:00 2001
From: Meo597 <197331664+Meo597@users.noreply.github.com>
Date: Thu, 10 Apr 2025 03:54:41 +0800
Subject: [PATCH] cap: daemon with ambient and inheritable

---
 init.d/xray | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/init.d/xray b/init.d/xray
index 397c411..93d526c 100644
--- a/init.d/xray
+++ b/init.d/xray
@@ -9,7 +9,7 @@ respawn_max=0
 
 pidfile="/run/${RC_SVCNAME}.pid"
 rc_ulimit="-n 1024000 -u 1024000"
-capabilities="cap_net_bind_service,cap_net_admin,cap_net_raw"
+capabilities="^cap_net_bind_service,^cap_net_admin,^cap_net_raw"
 extra_commands="checkconfig"
 
 env=${env:-"XRAY_LOCATION_ASSET=/usr/local/share/xray/"} # See: https://github.com/XTLS/Xray-core/blob/main/common/platform/platform.go