diff options
| author | Philippe Guibert <philippe.guibert@6wind.com> | 2018-03-02 15:20:43 +0100 |
|---|---|---|
| committer | Philippe Guibert <philippe.guibert@6wind.com> | 2018-03-02 15:20:43 +0100 |
| commit | 4b322ffebb13880f6fc6175acb926c225b07d117 (patch) | |
| tree | 997f99058fefb320eec324fe59941f6730e0eabe /bgpd/bgp_main.c | |
| parent | Merge pull request #1784 from donaldsharp/documentation (diff) | |
| download | frr-4b322ffebb13880f6fc6175acb926c225b07d117.tar.xz frr-4b322ffebb13880f6fc6175acb926c225b07d117.zip | |
bgpd,ospfd: add sys_admin capabilities
This capability, when used, is mapped over linux sys_admin capability.
This is necessary from the daemon perspective, in order to handle NETNS
based VRFs, because calling setns() requires sys admin capability.
Signed-off-by: Philippe Guibert <philippe.guibert@6wind.com>
Diffstat (limited to 'bgpd/bgp_main.c')
| -rw-r--r-- | bgpd/bgp_main.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/bgpd/bgp_main.c b/bgpd/bgp_main.c index 82c74e4af..30b7afff9 100644 --- a/bgpd/bgp_main.c +++ b/bgpd/bgp_main.c @@ -106,7 +106,7 @@ static int retain_mode = 0; /* privileges */ static zebra_capabilities_t _caps_p[] = { - ZCAP_BIND, ZCAP_NET_RAW, ZCAP_NET_ADMIN, + ZCAP_BIND, ZCAP_NET_RAW, ZCAP_NET_ADMIN, ZCAP_SYS_ADMIN }; struct zebra_privs_t bgpd_privs = { |