From: Ian Jackson <ijackson@chiark.greenend.org.uk>
Date: Wed, 1 Oct 2014 17:19:20 +0000 (+0100)
Subject: polypath: Provide privsep mode
X-Git-Tag: base.ipv6-polypath-fixes-2.v1~28
X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~mdw/git/secnet/commitdiff_plain/93cdea57befc5f3ba37a087f827bf02f5768a4a5?hp=93cdea57befc5f3ba37a087f827bf02f5768a4a5

polypath: Provide privsep mode

If secnet is going to drop privileges, it won't be able to call
setsockopt(,,SO_BINDTODEVICE,) to set up the new polypath sockets.

Provide an arrangement where this is done by a child forked before we
drop privilege.

Add some comments to the existing just-broken-down interface change
handling code, saying whether and how they are used in the non-privsep
and privsep cases.

Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
---