From 5d892343fa527873f7f892e3ba3b0d5b86c78a9c Mon Sep 17 00:00:00 2001
From: Martin Willi <martin@strongswan.org>
Date: Wed, 7 May 2008 08:46:37 +0000
Subject: using capset version 1 if a newer is available

---
 src/charon/daemon.c | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'src')

diff --git a/src/charon/daemon.c b/src/charon/daemon.c
index 87f33480f..0400a991d 100644
--- a/src/charon/daemon.c
+++ b/src/charon/daemon.c
@@ -266,7 +266,13 @@ static void drop_capabilities(private_daemon_t *this, bool full)
 		keep |= (1<<CAP_SETGID);
 	}
 
+	/* we use the old capset version for now. For systems with version 2
+	 * available, we specifiy version 1 excplicitly. */
+#ifdef _LINUX_CAPABILITY_VERSION_1
+	hdr.version = _LINUX_CAPABILITY_VERSION_1;
+#else
 	hdr.version = _LINUX_CAPABILITY_VERSION;
+#endif
 	hdr.pid = 0;
 	data.inheritable = data.effective = data.permitted = keep;
 	
-- 
cgit v1.2.3