Make cap_reset_ambient() look before acting.

If the ambient set is locked, but empty already, allow
cap_reset_ambient to succeed. That is, change the semantics
of cap_reset_ambient to be those of ensuring that the set
is reset.

Signed-off-by: Andrew G. Morgan <morgan@kernel.org>
3 files changed