capability: add LastCap stub for non-Linux

capability/capability.go

@@ -132,3 +132,9 @@ func NewFile(path string) (Capabilities, error) {
 func NewFile2(path string) (Capabilities, error) {
 	return newFile(path)
 }
+
+// LastCap returns highest valid capability of the running kernel,
+// or an error if it can not be obtained.
+func LastCap() (Cap, error) {
+	return lastCap()
+}

capability/capability_linux.go

@@ -25,11 +25,6 @@ const (
 	linuxCapVer3 = 0x20080522
 )
 
-// LastCap returns highest valid capability of the running kernel.
-func LastCap() (Cap, error) {
-	return lastCap()
-}
-
 var lastCap = sync.OnceValues(func() (Cap, error) {
 	f, err := os.Open("/proc/sys/kernel/cap_last_cap")
 	if err != nil {

capability/capability_noop.go

@@ -11,10 +11,16 @@ package capability
 
 import "errors"
 
-func newPid(pid int) (Capabilities, error) {
-	return nil, errors.New("not supported")
+var errNotSup = errors.New("not supported")
+
+func newPid(_ int) (Capabilities, error) {
+	return nil, errNotSup
+}
+
+func newFile(_ string) (Capabilities, error) {
+	return nil, errNotSup
 }
 
-func newFile(path string) (Capabilities, error) {
-	return nil, errors.New("not supported")
+func lastCap() (Cap, error) {
+	return -1, errNotSup
 }

capability/capability_linux_test.go → capability/capability_test.go

@@ -4,15 +4,26 @@
 
 package capability
 
-import "testing"
+import (
+	"runtime"
+	"testing"
+)
 
 func TestLastCap(t *testing.T) {
 	last, err := LastCap()
-	if err != nil {
-		t.Fatal(err)
+	switch runtime.GOOS {
+	case "linux":
+		if err != nil {
+			t.Fatal(err)
+		}
+	default:
+		if err == nil {
+			t.Fatal(runtime.GOOS, ": want error, got nil")
+		}
+		return
 	}
 
-	// Sanity checks.
+	// Sanity checks (Linux only).
 	//
 	// Based on the fact Go 1.18+ supports Linux >= 2.6.32, and
 	//   - CAP_MAC_ADMIN (33) was added in 2.6.25;