From 0f320c7d887c272908e85864f3d07a53f440fc39 Mon Sep 17 00:00:00 2001
From: Klaus Schmidinger <vdr@tvdr.de>
Date: Fri, 23 Sep 2011 13:11:36 +0200
Subject: Added cap_net_raw to the capabilities that are not dropped

---
 vdr.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'vdr.c')

diff --git a/vdr.c b/vdr.c
index a599d7c9..b546b2a4 100644
--- a/vdr.c
+++ b/vdr.c
@@ -22,7 +22,7 @@
  *
  * The project's page is at http://www.tvdr.de
  *
- * $Id: vdr.c 2.24 2011/09/10 15:03:23 kls Exp $
+ * $Id: vdr.c 2.25 2011/09/23 13:09:37 kls Exp $
  */
 
 #include <getopt.h>
@@ -116,7 +116,7 @@ static bool SetUser(const char *UserName, bool UserDump)//XXX name?
 static bool DropCaps(void)
 {
   // drop all capabilities except selected ones
-  cap_t caps = cap_from_text("= cap_sys_nice,cap_sys_time=ep");
+  cap_t caps = cap_from_text("= cap_sys_nice,cap_sys_time,cap_net_raw=ep");
   if (!caps) {
      fprintf(stderr, "vdr: cap_from_text failed: %s\n", strerror(errno));
      return false;
-- 
cgit v1.2.3