Pi-Hole/dnsmasq
1
0
Fork 0
mirror of https://github.com/pi-hole/dnsmasq.git synced 2025-12-19 10:18:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix 90d7c6b97d CAP_NET_RAW, not CAP_NET_ADMIN.

Browse Source
This commit is contained in:
Simon Kelley
2019-09-16 23:02:12 +01:00
parent 90d7c6b97d
commit defd6b1d85
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
src/dnsmasq.c
View File

@@ -481,10 +481,10 @@ int main (int argc, char **argv)
need_cap_net_bind_service = 1;
/* usptream servers which bind to an interface call SO_BINDTODEVICE
for each TCP connection, so need CAP_NET_ADMIN */
for each TCP connection, so need CAP_NET_RAW */
for (serv = daemon->servers; serv; serv = serv->next)
if (serv->interface[0] != 0)
need_cap_net_admin = 1;
need_cap_net_raw = 1;
/* If we're doing Dbus or UBus, the above can be set dynamically,
(as can ports) so always (potentially) needed. */
@@ -492,7 +492,7 @@ int main (int argc, char **argv)
if (option_bool(OPT_DBUS))
{
need_cap_net_bind_service = 1;
need_cap_net_admin = 1;
need_cap_net_raw = 1;
}
#endif
@@ -500,7 +500,7 @@ int main (int argc, char **argv)
if (option_bool(OPT_UBUS))
{
need_cap_net_bind_service = 1;
need_cap_net_admin = 1;
need_cap_net_raw = 1;
}
#endif