denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

changed inheritable capability set to the permitted one to execute firewall script with CAP_NET_ADMIN

Browse Source
This commit is contained in:
Martin Willi
2007-09-28 07:04:09 +00:00
parent 780050cbc3
commit 055d016b49
1 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/charon/daemon.c
+1 -2
View File
@@ -251,8 +251,7 @@ static void drop_capabilities(private_daemon_t *this, bool full)
hdr.version = _LINUX_CAPABILITY_VERSION; hdr.version = _LINUX_CAPABILITY_VERSION;
hdr.pid = 0; hdr.pid = 0;
data.effective = data.permitted = keep; data.inheritable = data.effective = data.permitted = keep;
data.inheritable = 0;
if (capset(&hdr, &data)) if (capset(&hdr, &data))
{ {