bubblewrap
bubblewrap copied to clipboard
Don't bail if there are ambient capabilities
This feature implements the logic described by @xyene in https://github.com/containers/bubblewrap/issues/380#issuecomment-2571415032, i.e., instead of ensuring that CapPrm == 0, it checks that CapPrm == CapAmb.