summary refs log tree commit diff
path: root/bounce.c
diff options
context:
space:
mode:
authorJune McEnroe <june@causal.agency>2020-01-12 18:21:32 -0500
committerJune McEnroe <june@causal.agency>2020-01-12 18:21:32 -0500
commitee9a396f2225b68766f44a643470d66fd6a2b266 (patch)
treefdf9aee999fbf86d82cece0cfa70560bccc44fb5 /bounce.c
parentAdd option to set local client CA (diff)
downloadpounce-ee9a396f2225b68766f44a643470d66fd6a2b266.tar.gz
pounce-ee9a396f2225b68766f44a643470d66fd6a2b266.zip
Use the CAP_PREAD right
Required for the rewind call when loading the CA.
Diffstat (limited to 'bounce.c')
-rw-r--r--bounce.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/bounce.c b/bounce.c
index 7ea1c3f..ac30cd9 100644
--- a/bounce.c
+++ b/bounce.c
@@ -362,7 +362,7 @@ int main(int argc, char *argv[]) {
 
 	cap_rights_t saveRights, fileRights, sockRights, bindRights;
 	cap_rights_init(&saveRights, CAP_WRITE);
-	cap_rights_init(&fileRights, CAP_FCNTL, CAP_FSTAT, CAP_LOOKUP, CAP_READ);
+	cap_rights_init(&fileRights, CAP_FCNTL, CAP_FSTAT, CAP_LOOKUP, CAP_PREAD);
 	cap_rights_init(&sockRights, CAP_EVENT, CAP_RECV, CAP_SEND, CAP_SETSOCKOPT);
 	cap_rights_init(&bindRights, CAP_LISTEN, CAP_ACCEPT);
 	cap_rights_merge(&bindRights, &sockRights);