diff -Naur libreswan-3.15-orig/programs/pluto/plutomain.c libreswan-3.15/programs/pluto/plutomain.c
--- libreswan-3.15-orig/programs/pluto/plutomain.c	2016-06-21 10:37:03.635299030 -0400
+++ libreswan-3.15/programs/pluto/plutomain.c	2016-06-21 10:37:50.604989303 -0400
@@ -1395,6 +1395,7 @@
 		CAP_IPC_LOCK, CAP_AUDIT_WRITE,
 		/* for google authenticator pam */
 		CAP_SETGID, CAP_SETUID,
+		CAP_DAC_READ_SEARCH,
 		-1);
 	/*
 	 * We need to retain some capabilities for our children (updown):