fix: incorrect CAP_BPF check method

[hengyoush]

According to the linux man pages: https://man7.org/linux/man-pages/man2/capset.2.html:

Note that the CAP_* values are bit indexes and need to be bit-shifted before ORing into the bit fields.

And added a check for CAP_SYS_ADMIN permissions.

CLOSE #714

[Asphaltt]

LGTM.

Please use git commit --amend --signoff to sign-off the commit.

[cfc4n]

/review

[github-actions]

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

🎫 Ticket compliance analysis ✅ 714 - Fully compliant Fully compliant requirements: Replace the incorrect CAP_BPF check method with a bit-shifted approach as per the Linux man pages. Ensure the code correctly checks for CAP_BPF permissions. Not compliant requirements:

⏱️ Estimated effort to review: 2 🔵🔵⚪⚪⚪

🧪 No relevant tests

🔒 No security concerns identified

⚡ Recommended focus areas for review Possible Issue Verify that the bit-shifted CAP_BPF and CAP_SYS_ADMIN checks are implemented correctly and align with the Linux man pages. capBpfMask := uint32(1 << (unix.CAP_BPF - 32)) capSysAdminMask := uint32(1 << unix.CAP_SYS_ADMIN) haveBpfCap := (data[1].Permitted&capBpfMask != 0) || (data[0].Permitted&capSysAdminMask != 0)

[cfc4n]

LGTM, Thanks.