T2816: capabilities: remove xtables-multi and dumpcap xtables-multi

binaries no longer needed/instalöled after ipsec rewrite to XML and Python.
vyos · Jun 13, 2021 · c6f42d5 · c6f42d5
1 parent fd1d71b
commit c6f42d5
Showing 1 changed file with 0 additions and 3 deletions.
diff --git a/sysconf/filecaps b/sysconf/filecaps
@@ -4,16 +4,13 @@
 cap_net_admin=pe	/sbin/ethtool
 cap_net_admin=pe	/sbin/tc
 cap_net_admin=pe	/bin/ip
-# handles /sbin/iptables and /sbin/ip6tables symlink target
-cap_net_admin=pe	/sbin/xtables-multi
 cap_net_admin=pe	/usr/sbin/ipset
 cap_net_admin=pe	/usr/sbin/conntrack
 cap_net_admin=pe	/usr/sbin/arp
 cap_net_admin=pe	/sbin/brctl
 
 # Raw sockets
 cap_net_raw=pe	/usr/sbin/tcpdump
-cap_net_raw,cap_net_admin=eip /usr/bin/dumpcap
 
 # Allow changes to system settings
 cap_net_admin,cap_sys_admin=pe /sbin/sysctl