Bug#704154: vdr - Fails if started without any of CAP_SYS_TIME, CAP_SYS_NICE or CAP_NET_RAW

[Tobias Grimm]

I'm not sure, if this qualifies for a "serious" severity, turning this 
into an RC bug.

You can still run VDR as root with "-u root" (or USER=root in 
/etc/default/vdr).

CAP_SYS_TIME is required to update the system time with the time from the 
DVB broadcasters. This behavior is optional, disabled by default and if 
setting the time fails, this just gets logged to the syslog.

So I guess, failing at CAP_SYS_TIME can be ignored.

CAP_SYS_NICE is required to set the thread priority. I think VDR is 
correct here to exit with an error level if CAP_SYS_NICE is not available.

I'm not sure why CAP_NET_RAW is required. The only networking stuff 
happening is at the SVDRP interface.

It might be that this was added to allow plugins like Streamdev to have 
raw network access.

What do you suggest to solve this? Ignore CAP_SYS_TIME if it can't be set?

Tobias