> Good point indeed. > > I didn't think about what happens when people like RH, Debian, or Ubuntu backport things. > > Better just to try it, and set errno. > > However what happens if the user space headers on a box are missing the CAP_SYSLOG macro but the kernel has a backport to support CAP_SYSLOG? >