tpws : dropcaps

docs/compile/openwrt/package/zapret/tpws/Makefile

@@ -12,7 +12,7 @@ define Package/tpws
 	CATEGORY:=Network
 	TITLE:=tpws
 	SUBMENU:=Zapret
- 	DEPENDS:=+zlib
+ 	DEPENDS:=+zlib +libcap
 endef
 
 define Build/Prepare

tpws/tpws.c

@@ -23,6 +23,7 @@
 #include <getopt.h>
 #include <pwd.h>
 #include <signal.h>
+#include <sys/capability.h>
 
 #include "tpws.h"
 #include "tpws_conn.h"
@@ -789,6 +790,26 @@ void daemonize()
 	/* stderror */
 }
 
+bool dropcaps()
+{
+	cap_t capabilities;
+
+	capabilities = cap_init();
+	if (cap_clear(capabilities))
+	{
+		perror("cap_init");
+		return false;
+	}
+	if (cap_set_proc(capabilities))
+	{
+		perror("cap_set_proc");
+		cap_free(capabilities);
+		return false;
+	}
+	cap_free(capabilities);
+	return true;
+}
+
 bool droproot()
 {
 	if (params.uid || params.gid)
@@ -804,9 +825,10 @@ bool droproot()
 			return false;
 		}
 	}
-	return true;
+	return dropcaps();
 }
 
+
 bool writepid(const char *filename)
 {
 	FILE *F;