blob: 1885f577f646e3e98b4d682899f40200f0be08cb (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
|
# SOME DESCRIPTIVE TITLE.
# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
# This file is distributed under the same license as the iproute2 package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: iproute2\n"
"Report-Msgid-Bugs-To: iproute2@packages.debian.org\n"
"POT-Creation-Date: 2018-04-12 12:01+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"Language: \n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=CHARSET\n"
"Content-Transfer-Encoding: 8bit\n"
#. Type: boolean
#. Description
#: ../iproute2.templates:1001
msgid "Allow ordinary users to run ip vrf exec using capabilities?"
msgstr ""
#. Type: boolean
#. Description
#: ../iproute2.templates:1001
msgid ""
"iproute2 can be used to configure and use Virtual Routing and Forwarding "
"(VRF) functionality in the kernel. This normally requires root permissions, "
"but sometimes it's useful to allow ordinary users to execute commands from "
"inside a virtual routing and forwarding domain. E.g. ip vrf exec examplevrf "
"ping 10.0.0.1"
msgstr ""
#. Type: boolean
#. Description
#: ../iproute2.templates:1001
msgid ""
"The ip command supports dropping capabilities, making an exception for ip "
"vrf exec. The drawback of setting the permissions is that if in the unlikely "
"case of a security critical bug being found before the ip command has "
"dropped capabilities then it could be used by an attacker to gain root "
"permissions. It's up to you to decide about the trade-offs and select the "
"best setting for your system. This will give cap_dac_override, cap_net_admin "
"and cap_bpf to /bin/ip."
msgstr ""
#. Type: boolean
#. Description
#: ../iproute2.templates:1001
msgid ""
"More information about VRF can be found at: https://www.kernel.org/doc/"
"Documentation/networking/vrf.txt"
msgstr ""
|
