From 405f5ab9e92d0cfe78fe33de081e02cfd89b91d1 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Tue, 25 Jun 2013 08:37:01 +0200 Subject: farp: Require CAP_NET_RAW capability to open AF_PACKET socket --- src/libcharon/plugins/farp/farp_plugin.c | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'src/libcharon/plugins/farp/farp_plugin.c') diff --git a/src/libcharon/plugins/farp/farp_plugin.c b/src/libcharon/plugins/farp/farp_plugin.c index cbc0bcf82..d31defca4 100644 --- a/src/libcharon/plugins/farp/farp_plugin.c +++ b/src/libcharon/plugins/farp/farp_plugin.c @@ -92,6 +92,12 @@ plugin_t *farp_plugin_create() { private_farp_plugin_t *this; + if (!lib->caps->keep(lib->caps, CAP_NET_RAW)) + { /* required to open ARP socket (AF_PACKET) */ + DBG1(DBG_NET, "farp plugin requires CAP_NET_RAW capability"); + return NULL; + } + INIT(this, .public = { .plugin = { -- cgit v1.2.3