 Tobias Brunner
|
54ca25800c
|
agent: Keep CAP_DAC_OVERRIDE to connect to ssh-agent socket
This is also required if charon-cmd is used with capability dropping.
|
2014-01-23 10:08:23 +01:00 |
|
|
Tobias Brunner
|
027676f750
|
capabilities: Add function to check if a capability is held, without keeping it
This can be useful if capabilities are not required anymore after
dropping privileges.
|
2013-07-18 15:25:35 +02:00 |
|
|
Tobias Brunner
|
1937538440
|
capabilities: Handle CAP_CHOWN specially as it might not be required
|
2013-06-25 17:16:33 +02:00 |
|
|
Tobias Brunner
|
6f15f5e632
|
dhcp: Require CAP_NET_BIND_SERVICE and CAP_NET_RAW to open/bind sockets
|
2013-06-25 17:16:32 +02:00 |
|
|
Tobias Brunner
|
1dd61bf13d
|
socket-default: Require CAP_NET_BIND_SERVICE for ports < 1024
Since we don't know which ports are used with socket-dynamic we can't
demand the capability there, but it might still be required.
|
2013-06-25 17:16:32 +02:00 |
|
|
Tobias Brunner
|
41b8546ac0
|
capabilities: Only plugins that require CAP_NET_ADMIN demand it
The daemon as such does not require this capability.
|
2013-06-25 17:16:32 +02:00 |
|
|
Tobias Brunner
|
a2eb581781
|
capabilities: Move global capabilities_t instance to libstrongswan
|
2013-06-25 17:16:32 +02:00 |
|
|
Tobias Brunner
|
2e21bac19a
|
capabilities: Ensure required capabilities are actually held by the process/user
|
2013-06-25 17:16:32 +02:00 |
|
|
Tobias Brunner
|
63ac6d00b0
|
Proper fallback if capability dropping is not available
|
2012-07-27 14:46:42 +02:00 |
|
|
Martin Willi
|
0619ddfaa4
|
Refactored heavily #ifdefd capability code to its own libstrongswan class
|
2012-07-04 11:01:40 +02:00 |
|