CAP_AUDIT_WRITE is now required by xauth-pam not eap-gtc plugin

src/libcharon/plugins/eap_gtc/eap_gtc_plugin.c

@@ -19,10 +19,6 @@
 
 #include <daemon.h>
 
-#ifndef CAP_AUDIT_WRITE
-#define CAP_AUDIT_WRITE 29
-#endif
-
 METHOD(plugin_t, get_name, char*,
 	eap_gtc_plugin_t *this)
 {
@@ -63,9 +59,6 @@ plugin_t *eap_gtc_plugin_create()
 		},
 	);
 
-	/* required for PAM authentication */
-	charon->caps->keep(charon->caps, CAP_AUDIT_WRITE);
-
 	return &this->plugin;
 }
 

src/libcharon/plugins/xauth_pam/xauth_pam_plugin.c

@@ -18,6 +18,10 @@
 
 #include <daemon.h>
 
+#ifndef CAP_AUDIT_WRITE
+#define CAP_AUDIT_WRITE 29
+#endif
+
 METHOD(plugin_t, get_name, char*,
 	xauth_pam_plugin_t *this)
 {
@@ -56,5 +60,8 @@ plugin_t *xauth_pam_plugin_create()
 		},
 	);
 
+	/* required for PAM authentication */
+	charon->caps->keep(charon->caps, CAP_AUDIT_WRITE);
+
 	return &this->plugin;
 }