Since dhcpd has been hardened (DynamicUser → NoNewPrivileges) it can't use a setcap wrapper. Instead, we add the net_admin capability to it's ambient set and run `ip route` directly. This is also safer that giving everyone permisison to change the routing table.
11 KiB
11 KiB