From 405f5ab9e92d0cfe78fe33de081e02cfd89b91d1 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Tue, 25 Jun 2013 08:37:01 +0200 Subject: [PATCH] farp: Require CAP_NET_RAW capability to open AF_PACKET socket --- src/libcharon/plugins/farp/farp_plugin.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/src/libcharon/plugins/farp/farp_plugin.c b/src/libcharon/plugins/farp/farp_plugin.c index cbc0bcf825..d31defca45 100644 --- a/src/libcharon/plugins/farp/farp_plugin.c +++ b/src/libcharon/plugins/farp/farp_plugin.c @@ -92,6 +92,12 @@ plugin_t *farp_plugin_create() { private_farp_plugin_t *this; + if (!lib->caps->keep(lib->caps, CAP_NET_RAW)) + { /* required to open ARP socket (AF_PACKET) */ + DBG1(DBG_NET, "farp plugin requires CAP_NET_RAW capability"); + return NULL; + } + INIT(this, .public = { .plugin = { -- 2.47.2