# SOME DESCRIPTIVE TITLE.
# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
# This file is distributed under the same license as the iproute2 package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: iproute2\n"
"Report-Msgid-Bugs-To: iproute2@packages.debian.org\n"
"POT-Creation-Date: 2018-04-12 12:01+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"Language: \n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=CHARSET\n"
"Content-Transfer-Encoding: 8bit\n"

#. Type: boolean
#. Description
#: ../iproute2.templates:1001
msgid "Allow ordinary users to run ip vrf exec using capabilities?"
msgstr ""

#. Type: boolean
#. Description
#: ../iproute2.templates:1001
msgid ""
"iproute2 can be used to configure and use Virtual Routing and Forwarding "
"(VRF) functionality in the  kernel. This normally requires root permissions, "
"but sometimes it's useful to allow ordinary users to execute commands from "
"inside a virtual routing and forwarding domain. E.g. ip vrf exec examplevrf "
"ping 10.0.0.1"
msgstr ""

#. Type: boolean
#. Description
#: ../iproute2.templates:1001
msgid ""
"The ip command supports dropping capabilities, making an exception for ip "
"vrf exec. The drawback of setting the permissions is that if in the unlikely "
"case of a security critical bug being found before the ip command has "
"dropped capabilities then it could be used by an attacker to gain root "
"permissions. It's up to you to decide about the trade-offs and select the "
"best setting for your system. This will give cap_dac_override, cap_net_admin "
"and cap_bpf to /bin/ip."
msgstr ""

#. Type: boolean
#. Description
#: ../iproute2.templates:1001
msgid ""
"More information about VRF can be found at: https://www.kernel.org/doc/"
"Documentation/networking/vrf.txt"
msgstr ""