[Swan-commit] Changes to ref refs/heads/master

[Paul Wouters]

New commits:
commit ee4ea836ebf306755430fa09b0c7b334d6d2de5b
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sun Mar 30 20:12:49 2014 -0400

    updated CHANGES

commit 088d92068db1cced284d584744c3242327e2ee64
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sun Mar 30 20:12:14 2014 -0400

    pluto: ensure addconn thread uses the same ctlbase as pluto did

commit 088d8f015fce0782fad035f84484e64c06159de4
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sun Mar 30 19:54:04 2014 -0400

    pluto: Delay dropping CAP_DAC_OVERRIDE a little further.
    
    Delay it until after the NSS database and lock/pid file handling is
    done, just before daemonising. This allows non-root NSS directories
    to further facilitate Openstack.

commit c50fd74813a125afe53219b9989b321f907ba48a
Author: Paul Wouters <pwouters at redhat.com>
Date:   Sun Mar 30 19:51:57 2014 -0400

    _stackmanager: filter out "dynamic" for inet ip addr add command.
    
    Also redirect stderr to /dev/null because when we run ipsec start
    twice, since we no longer unload the modules, we already have the
    right address on the ipsecX interface, and so this generates an
    "RTNETLINK answers: File exists".