From 55aa537fb54a9c01820d4638babccdc8f8a0ef04 Mon Sep 17 00:00:00 2001 From: Matthias Schiffer Date: Mon, 22 Feb 2016 21:29:04 +0100 Subject: Add "drop privileges force" option which allows to drop CAP_NET_ADMIN even when fastd thinks it might still need it --- src/types.h | 1 + 1 file changed, 1 insertion(+) (limited to 'src/types.h') diff --git a/src/types.h b/src/types.h index 240a1bb..0792e1b 100644 --- a/src/types.h +++ b/src/types.h @@ -74,6 +74,7 @@ typedef enum fastd_drop_caps { DROP_CAPS_OFF, /**< The capabilities aren't dropped at all */ DROP_CAPS_ON, /**< The capabilities are dropped after executing the on-up command */ DROP_CAPS_EARLY, /**< The capabilities are dropped before executing the on-up command */ + DROP_CAPS_FORCE, /**< The capabilities are dropped before executing the on-up command; CAP_NET_ADMIN is always dropped */ } fastd_drop_caps_t; /** Types of file descriptors to poll on */ -- cgit v1.2.3