]> git.ipfire.org Git - thirdparty/suricata.git/commit
init: Fix dropping privileges in nflog runmode 4534/head
authorTimo Sigurdsson <public_timo.s@silentcreek.de>
Mon, 3 Feb 2020 22:17:17 +0000 (23:17 +0100)
committerVictor Julien <victor@inliniac.net>
Tue, 11 Feb 2020 09:09:48 +0000 (10:09 +0100)
commite1b363b4165aba7ace7c4583d298f504b9242b9e
treee33240ae05b0e8de424ffcfccd270675dcb8fe5b
parent43ee9d8b9bfafc98594f7c21dc0b8aafb52663c0
init: Fix dropping privileges in nflog runmode

Using the run-as configuration option with the nflog capture method
results in the following error during the startup of suricata:
[ERRCODE: SC_ERR_NFLOG_BIND(248)] - nflog_bind_pf() for AF_INET failed

This is because SCDropMainThreadCaps does not have any capabilities
defined for the nflog runmode (unlike other runmodes). Therefore, apply
the same capabilities to the nflog runmode that are already defined for
the nfqueue runmode. This has been confirmed to allow suricata start
and drop its privileges in the nflog runmode.

Fixes redmine issue #3265.

Signed-off-by: Timo Sigurdsson <public_timo.s@silentcreek.de>
(cherry picked from commit 1262ecbde0c2130f3fd4ca336cd2646828de9391)
src/util-privs.c