]> git.puffer.fish Git - mirror/frr.git/commitdiff
zebra: add ipc_lock, read_search and sys_rawio to zebra's privileges
authorAnuradha Karuppiah <anuradhak@nvidia.com>
Mon, 3 Jan 2022 19:48:20 +0000 (11:48 -0800)
committerDonald Sharp <sharpd@nvidia.com>
Mon, 27 Jun 2022 11:56:55 +0000 (07:56 -0400)
These are needed for dpdk:rte_eal_init.

Signed-off-by: Anuradha Karuppiah <anuradhak@nvidia.com>
zebra/main.c

index 87f3de2d97ef871164e7fa4708402c9d3c0b14ab..2d492f86496256b699ce1eed6fa3c6c7ac591927 100644 (file)
@@ -105,9 +105,9 @@ const struct option longopts[] = {
 #endif /* HAVE_NETLINK */
        {0}};
 
-zebra_capabilities_t _caps_p[] = {
-       ZCAP_NET_ADMIN, ZCAP_SYS_ADMIN, ZCAP_NET_RAW,
-};
+zebra_capabilities_t _caps_p[] = {ZCAP_NET_ADMIN,   ZCAP_SYS_ADMIN,
+                                 ZCAP_NET_RAW,     ZCAP_IPC_LOCK,
+                                 ZCAP_READ_SEARCH, ZCAP_SYS_RAWIO};
 
 /* zebra privileges to run with */
 struct zebra_privs_t zserv_privs = {