From bdd1627fa57dd53efcdfb09c399e8c25ca6d47cd Mon Sep 17 00:00:00 2001 From: Nidhin MS Date: Mon, 7 Sep 2026 16:12:00 +0530 Subject: [PATCH] mctpd: grant CAP_NET_RAW The kernel MCTP socket implementation requires CAP_NET_RAW to send MCTP control messages when mctpd runs as an unprivileged user. Tested: meson setup build --wipe -Dtests=false && meson compile -C build Signed-off-by: Nidhin MS --- conf/mctpd.service | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/conf/mctpd.service b/conf/mctpd.service index 7f96c25..d15a057 100644 --- a/conf/mctpd.service +++ b/conf/mctpd.service @@ -9,7 +9,7 @@ Type=dbus BusName=au.com.codeconstruct.MCTP1 ExecStart=/usr/sbin/mctpd User=mctpd -AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_NET_ADMIN +AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_NET_ADMIN CAP_NET_RAW [Install] WantedBy=mctp.target