--- usr.lib.ipsec.stroke.orig	2015-02-13 11:45:29.737420901 -0500
+++ usr.lib.ipsec.stroke	2015-02-13 11:46:49.697275371 -0500
@@ -15,6 +15,8 @@
 /usr/lib/ipsec/stroke {
   #include <abstractions/base>
 
+  capability dac_override,
+
   /etc/strongswan.conf          r,
   /etc/strongswan.d/            r,
   /etc/strongswan.d/**          r,