From 25dac85507ca3a107351a9f84173b5bcaea8a450 Mon Sep 17 00:00:00 2001
From: hasso <hasso>
Date: Tue, 13 Jul 2004 03:06:51 +0000
Subject: Creating irdp socket requires more privileges.

---
 zebra/irdp_main.c | 12 ++++++++++++
 1 file changed, 12 insertions(+)

(limited to 'zebra/irdp_main.c')

diff --git a/zebra/irdp_main.c b/zebra/irdp_main.c
index dac6aea1a..56e418402 100644
--- a/zebra/irdp_main.c
+++ b/zebra/irdp_main.c
@@ -50,6 +50,7 @@
 #include "log.h"
 #include "zclient.h"
 #include "thread.h"
+#include "privs.h"
 #include "zebra/interface.h"
 #include "zebra/rtadv.h"
 #include "zebra/rib.h"
@@ -64,6 +65,8 @@
 
 /* GLOBAL VARS */
 
+extern struct zebra_privs_t zserv_privs;
+
 /* Master of threads. */
 extern struct zebra_t zebrad;
 struct thread *t_irdp_raw;
@@ -98,7 +101,16 @@ irdp_sock_init (void)
 {
   int ret, i;
 
+  if ( zserv_privs.change (ZPRIVS_RAISE) )
+       zlog_err ("irdp_sock_init: could not raise privs, %s",
+                  strerror (errno) );
+
   irdp_sock = socket (AF_INET, SOCK_RAW, IPPROTO_ICMP);
+
+  if ( zserv_privs.change (ZPRIVS_LOWER) )
+       zlog_err ("irdp_sock_init: could not lower privs, %s",
+             strerror (errno) );
+
   if (irdp_sock < 0) {
     zlog_warn ("IRDP: can't create irdp socket %s", strerror(errno));
     return irdp_sock;
-- 
cgit v1.2.3