Add CAP_NET_RAW capability due to the omudpspoof module

The CAP_NET_RAW ensures the use of RAW and PACKET sockets, which is utilized by the omudpspoof module, more precisely the libnet_init function.
rsyslog · Oct 4, 2023 · 0638709 · 0638709
1 parent 8d33dce
commit 0638709
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/tools/rsyslogd.c b/tools/rsyslogd.c
@@ -1652,6 +1652,7 @@ initAll(int argc, char **argv)
 		capabilities_t capabilities[] = {
 			#define CAP_FIELD(code, type) { code, #code,  0 , type}
 			CAP_FIELD(CAP_BLOCK_SUSPEND, CAPNG_EFFECTIVE | CAPNG_PERMITTED),
+			CAP_FIELD(CAP_NET_RAW, CAPNG_EFFECTIVE | CAPNG_PERMITTED ),
 			CAP_FIELD(CAP_CHOWN, CAPNG_EFFECTIVE | CAPNG_PERMITTED ),
 			CAP_FIELD(CAP_IPC_LOCK, CAPNG_EFFECTIVE | CAPNG_PERMITTED ),
 			CAP_FIELD(CAP_LEASE, CAPNG_EFFECTIVE | CAPNG_PERMITTED),