#include "common.h"
#include "plugin.h"
-#include "configfile.h"
+
+#include <libiptc/libiptc.h>
+#include <libiptc/libip6tc.h>
#ifdef HAVE_SYS_CAPABILITY_H
# include <sys/capability.h>
#endif
-#include <libiptc/libiptc.h>
-#include <libiptc/libip6tc.h>
-
/*
* iptc_handle_t was available before libiptc was officially available as a
* shared library. Note, that when the shared lib was introduced, the API and
static int iptables_init (void)
{
-#ifdef HAVE_SYS_CAPABILITY_H
+#if defined(HAVE_SYS_CAPABILITY_H) && defined(CAP_NET_ADMIN)
if (check_capability (CAP_NET_ADMIN) != 0)
{
if (getuid () == 0)
WARNING ("iptables plugin: Running collectd as root, but the "
"CAP_NET_ADMIN capability is missing. The plugin's read "
"function will probably fail. Is your init system dropping "
- "capabilities ?");
+ "capabilities?");
else
WARNING ("iptables plugin: collectd doesn't have the CAP_NET_ADMIN "
"capability. If you don't want to run collectd as root, try "