From: "Serge E. Hallyn" <serue@us.ibm.com>

With the introduction of per-process securebits, the capabilities-related
prctl callbacks were moved into cap_task_prctl().  Have root_plug use
cap_task_prctl() so that PR_SET_KEEPCAPS is defined.

Signed-off-by: Serge E. Hallyn <serue@us.ibm.com>
Acked-by: Greg Kroah-Hartman <gregkh@suse.de>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
---

 security/root_plug.c |    1 +
 1 file changed, 1 insertion(+)

diff -puN security/root_plug.c~root_plug-use-cap_task_prctl security/root_plug.c
--- a/security/root_plug.c~root_plug-use-cap_task_prctl
+++ a/security/root_plug.c
@@ -86,6 +86,7 @@ static struct security_operations rootpl
 
 	.task_post_setuid =		cap_task_post_setuid,
 	.task_reparent_to_init =	cap_task_reparent_to_init,
+	.task_prctl =			cap_task_prctl,
 
 	.bprm_check_security =		rootplug_bprm_check_security,
 };
_