[Openswan dev] [PATCH] fix 'ip' failure on Fedora when built against libcap-ng

[Paul Wouters]

On Sat, 16 Jan 2010, Kyle McMartin wrote:

> When built against libcap-ng to drop posix capabilities, pluto must
> retain some capabilities in the bounding set, otherwise its shell
> children will not be able to add routes and addrs using the 'ip' command
> in the _updown hook.

Thanks! Will be in openswan 2.6.25.

Paul