From: Martin Willi <martin@revosec.ch>
Date: Wed, 8 May 2013 12:58:59 +0000 (+0200)
Subject: capabilities: leak-detective using dlsym() does not need CAP_SYS_NICE anymore
X-Git-Tag: 5.1.0dr1~143
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=e8b2ce1e72c8bbda10ac5c51615bfb3e2d7899da;p=thirdparty%2Fstrongswan.git

capabilities: leak-detective using dlsym() does not need CAP_SYS_NICE anymore
---

diff --git a/src/libstrongswan/utils/capabilities.c b/src/libstrongswan/utils/capabilities.c
index c58ce2fdf6..89f47820e1 100644
--- a/src/libstrongswan/utils/capabilities.c
+++ b/src/libstrongswan/utils/capabilities.c
@@ -309,15 +309,9 @@ capabilities_t *capabilities_create()
 		},
 	);
 
-#ifdef CAPABILITIES
 #ifdef CAPABILITIES_LIBCAP
 	this->caps = cap_init();
 #endif /* CAPABILITIES_LIBCAP */
-	if (lib->leak_detective)
-	{
-		keep(this, CAP_SYS_NICE);
-	}
-#endif /* CAPABILITIES */
 
 #ifdef EMULATE_R_FUNCS
 	this->mutex = mutex_create(MUTEX_TYPE_DEFAULT);