diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2013-06-25 08:49:55 +0200 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2013-06-25 17:16:32 +0200 |
| commit | 9fd2583e6b5fbf231ab9504c8d341d26bc8588eb (patch) | |
| tree | b0be54cbb0f42f93c7431c0bd52901764802a44a /src/libhydra/plugins/kernel_netlink/kernel_netlink_plugin.c | |
| parent | 405f5ab9e92d0cfe78fe33de081e02cfd89b91d1 (diff) | |
| download | strongswan-9fd2583e6b5fbf231ab9504c8d341d26bc8588eb.tar.bz2 strongswan-9fd2583e6b5fbf231ab9504c8d341d26bc8588eb.tar.xz | |
kernel-netlink: Make CAP_NET_ADMIN capability optional
It is not required to use the kernel-net part of the plugin.
Diffstat (limited to 'src/libhydra/plugins/kernel_netlink/kernel_netlink_plugin.c')
| -rw-r--r-- | src/libhydra/plugins/kernel_netlink/kernel_netlink_plugin.c | 7 |
1 files changed, 4 insertions, 3 deletions
diff --git a/src/libhydra/plugins/kernel_netlink/kernel_netlink_plugin.c b/src/libhydra/plugins/kernel_netlink/kernel_netlink_plugin.c index 2db03d854..8d5a0d5e8 100644 --- a/src/libhydra/plugins/kernel_netlink/kernel_netlink_plugin.c +++ b/src/libhydra/plugins/kernel_netlink/kernel_netlink_plugin.c @@ -66,10 +66,11 @@ plugin_t *kernel_netlink_plugin_create() private_kernel_netlink_plugin_t *this; if (!lib->caps->keep(lib->caps, CAP_NET_ADMIN)) - { /* required to bind/use XFRM sockets / create routing tables */ - DBG1(DBG_KNL, "kernel-netlink plugin requires CAP_NET_ADMIN " + { /* required to bind/use XFRM sockets / create/modify routing tables, but + * not if only the read-only parts of kernel-netlink-net are used, so + * we don't fail here */ + DBG1(DBG_KNL, "kernel-netlink plugin might require CAP_NET_ADMIN " "capability"); - return NULL; } INIT(this, |