Proper fallback if capability dropping is not available

src/charon-nm/nm/nm_backend.c

@@ -22,7 +22,9 @@
 #include <daemon.h>
 #include <processing/jobs/callback_job.h>
 
+#ifndef CAP_DAC_OVERRIDE
 #define CAP_DAC_OVERRIDE 1
+#endif
 
 typedef struct nm_backend_t nm_backend_t;
 

src/libcharon/daemon.c

@@ -29,6 +29,10 @@
 #include <kernel/kernel_handler.h>
 #include <processing/jobs/start_action_job.h>
 
+#ifndef CAP_NET_ADMIN
+#define CAP_NET_ADMIN 12
+#endif
+
 typedef struct private_daemon_t private_daemon_t;
 
 /**

src/libcharon/plugins/eap_gtc/eap_gtc_plugin.c

@@ -19,8 +19,9 @@
 
 #include <daemon.h>
 
-/* missing in cababilities.h */
+#ifndef CAP_AUDIT_WRITE
 #define CAP_AUDIT_WRITE 29
+#endif
 
 METHOD(plugin_t, get_name, char*,
 	eap_gtc_plugin_t *this)

src/libstrongswan/utils/capabilities.h

@@ -24,7 +24,7 @@
 #include <library.h>
 #ifdef HAVE_SYS_CAPABILITY_H
 # include <sys/capability.h>
-#else
+#elif defined(CAPABILITIES_NATIVE)
 # include <linux/capability.h>
 #endif