# cap_net_admin to use ioctl socket
# cap_net_bind_service to call bind
# cap_net_broadcast to make socket broadcasts, and listen to multicasts
+# cap_net_raw to make socket permission(ICMPv6)
if [ -e "/usr/bin/dnsmasq" ]
-then /usr/sbin/setcap cap_dac_override,cap_net_admin,cap_net_bind_service,cap_net_broadcast=ei /usr/bin/dnsmasq
+then /usr/sbin/setcap cap_dac_override,cap_net_admin,cap_net_bind_service,cap_net_broadcast,cap_net_raw=ei /usr/bin/dnsmasq
fi
# Package iproute2