suricata-fix-nflog-privs.patch - Suricata - Open Information Security Foundation

Bug #3474 » suricata-fix-nflog-privs.patch

Timo Sigurdsson, 02/02/2020 06:12 PM

                         CAP_NET_ADMIN, CAP_NET_RAW, CAP_SYS_NICE,
                         -1);
                 break;
             case RUNMODE_NFLOG:
             case RUNMODE_NFQ:
                 capng_updatev(CAPNG_ADD, CAPNG_EFFECTIVE|CAPNG_PERMITTED,
                         CAP_NET_ADMIN,          /* needed for nfqueue inline mode */
                         CAP_NET_ADMIN,          /* needed for nflog and nfqueue inline mode */
                         CAP_SYS_NICE,
                         -1);
                 break;

(2-2/2)