diff --git a/CHANGES b/CHANGES
index b10c07ea7c..5749f7303a 100644
--- a/CHANGES
+++ b/CHANGES
@@ -18,6 +18,10 @@
 			address when a nameserver was specified by name.
 			[RT #12286]
 
+1713.	[port]		linux: extend capset failure message to say:
+			please ensure that the capset kernel module is
+			loaded.  see insmod(8)
+
 1712.	[bug]		Missing FULLCHECK for "trusted-key" in dig.
 
 1711.	[func]		'rndc unfreeze' has been deprecated by 'rndc thaw'.
diff --git a/bin/named/unix/os.c b/bin/named/unix/os.c
index 7df7f3b41b..f69280fed8 100644
--- a/bin/named/unix/os.c
+++ b/bin/named/unix/os.c
@@ -15,7 +15,7 @@
  * PERFORMANCE OF THIS SOFTWARE.
  */
 
-/* $Id: os.c,v 1.46.2.4.8.16 2004/05/04 03:19:42 marka Exp $ */
+/* $Id: os.c,v 1.46.2.4.8.17 2004/09/16 02:50:04 marka Exp $ */
 
 #include <config.h>
 #include <stdarg.h>
@@ -161,7 +161,10 @@ linux_setcaps(unsigned int caps) {
 	cap.inheritable = caps;
 	if (syscall(SYS_capset, &caphead, &cap) < 0) {
 		isc__strerror(errno, strbuf, sizeof(strbuf));
-		ns_main_earlyfatal("capset failed: %s", strbuf);
+		ns_main_earlyfatal("capset failed: %s:"
+				   " please ensure that the capset kernel"
+				   " module is loaded.  see insmod(8)",
+				   strbuf);
 	}
 }