From 43954e07f30d05b2da8319749400c9bf4d01c23c Mon Sep 17 00:00:00 2001
From: Marc Fournier <marc.fournier@camptocamp.com>
Date: Tue, 10 May 2016 18:01:49 +0200
Subject: [PATCH] iptables: include libiptc headers before capability.h

Some versions of sys/capability.h seem to have conflicting declarations
with other (linux) kernel header files, so order matters.
---
 src/iptables.c | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/iptables.c b/src/iptables.c
index a2ed4c73..66dbab7f 100644
--- a/src/iptables.c
+++ b/src/iptables.c
@@ -30,13 +30,13 @@
 #include "plugin.h"
 #include "configfile.h"
 
+#include <libiptc/libiptc.h>
+#include <libiptc/libip6tc.h>
+
 #ifdef HAVE_SYS_CAPABILITY_H
 # include <sys/capability.h>
 #endif
 
-#include <libiptc/libiptc.h>
-#include <libiptc/libip6tc.h>
-
 /*
  * iptc_handle_t was available before libiptc was officially available as a
  * shared library. Note, that when the shared lib was introduced, the API and
-- 
2.11.0