denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

kernel-netlink: Make CAP_NET_ADMIN capability optional

Browse Source 
It is not required to use the kernel-net part of the plugin.
This commit is contained in:
Tobias Brunner
2013-06-25 17:16:32 +02:00
parent 405f5ab9e9
commit 9fd2583e6b
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libhydra/plugins/kernel_netlink/kernel_netlink_plugin.c
+4 -3
View File
@@ -66,10 +66,11 @@ plugin_t *kernel_netlink_plugin_create()
private_kernel_netlink_plugin_t *this; private_kernel_netlink_plugin_t *this;
if (!lib->caps->keep(lib->caps, CAP_NET_ADMIN)) if (!lib->caps->keep(lib->caps, CAP_NET_ADMIN))
{ /* required to bind/use XFRM sockets / create routing tables */ { /* required to bind/use XFRM sockets / create/modify routing tables, but
DBG1(DBG_KNL, "kernel-netlink plugin requires CAP_NET_ADMIN " * not if only the read-only parts of kernel-netlink-net are used, so
* we don't fail here */
DBG1(DBG_KNL, "kernel-netlink plugin might require CAP_NET_ADMIN "
"capability"); "capability");
return NULL;
} }
INIT(this, INIT(this,