privsep: Handle all file IO in the Priviledged Actioneer

This allows us to move the database directory back into the
root of the filesystem.
While here, harden the files by denying any user read access to them.

As part of this change, init the DUID from any machine data and
cache the default DHCP vendor field before dropping priviledges as we
may lose access to this later.

1 files changed, 2 insertions, 0 deletions

diff --git a/src/if.h b/src/if.h
index f58b3028..73f8b915 100644
--- a/src/if.h
+++ b/src/if.h
@@ -95,6 +95,8 @@ typedef unsigned long		ioctl_request_t;
 #define	FRAMEHDRLEN_MAX			14	/* only ethernet support */
 #define	FRAMELEN_MAX			(FRAMEHDRLEN_MAX + 9216)
 
+#define UDPLEN_MAX			64 * 1024
+
 /* Work out if we have a private address or not
  * 10/8
  * 172.16/12