capability: rework capability assignement

THis patch rework the capability code to use a switch
instead of a if. It also "reduces" PF_RING and NFQ capabilities.

src/util-privs.c

@@ -69,15 +69,23 @@ void SCDropMainThreadCaps(uint32_t userid, uint32_t groupid)
 
     capng_clear(CAPNG_SELECT_BOTH);
 
-    if (run_mode == RUNMODE_PFRING || run_mode == RUNMODE_NFQ) {
+    switch (run_mode) {
-        capng_updatev(CAPNG_ADD, CAPNG_EFFECTIVE|CAPNG_PERMITTED,
+        case RUNMODE_PCAP_DEV:
-                      CAP_NET_RAW,            /* needed for pcap live mode */
+        case RUNMODE_AFP_DEV:
-                      CAP_NET_ADMIN,          /* needed for nfqueue inline mode */
+            capng_updatev(CAPNG_ADD, CAPNG_EFFECTIVE|CAPNG_PERMITTED,
-                      -1);
+                    CAP_NET_RAW,            /* needed for pcap live mode */
-    } else if (run_mode == RUNMODE_PCAP_DEV || run_mode == RUNMODE_AFP_DEV) {
+                    -1);
-        capng_updatev(CAPNG_ADD, CAPNG_EFFECTIVE|CAPNG_PERMITTED,
+            break;
-                      CAP_NET_RAW,            /* needed for pcap live mode */
+        case RUNMODE_PFRING:
-                      -1);
+            capng_updatev(CAPNG_ADD, CAPNG_EFFECTIVE|CAPNG_PERMITTED,
+                    CAP_NET_ADMIN,
+                    -1);
+            break;
+        case RUNMODE_NFQ:
+            capng_updatev(CAPNG_ADD, CAPNG_EFFECTIVE|CAPNG_PERMITTED,
+                    CAP_NET_ADMIN,          /* needed for nfqueue inline mode */
+                    -1);
+            break;
     }
 
     if (capng_change_id(userid, groupid, CAPNG_DROP_SUPP_GRP |