20 Commits

Author SHA1 Message Date
DL6ER de45ba840a Add CAP_SYS_TIME to required capabilities to set the system time without being root
Signed-off-by: DL6ER <dl6er@dl6er.de>
2024-06-04 13:17:09 +02:00
DL6ER 4ea9c1b444 Remove reboot and poweroff actions from the API
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-07-28 22:46:28 +02:00
DL6ER 21ac19bf22 Merge remote-tracking branch 'origin/development' into new/http
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-05-23 20:08:39 +02:00
DL6ER e3550c1a47 Add capabilities check for CAP_NET_RAW (root always has it)
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-05-16 21:02:29 +02:00
DL6ER 48fc06d46b Add POST /api/teleporter to upload and install backed up configuration
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-01-25 21:51:12 +01:00
DL6ER d51aa378a3 Add /api/action/reboot and /api/action/poweroff (needs extra capability CAP_SYS_BOOT)
Signed-off-by: DL6ER <dl6er@dl6er.de>
2023-01-24 20:26:37 +01:00
DL6ER 26ccee3f4c Merge branch 'development' into new/http
Signed-off-by: DL6ER <dl6er@dl6er.de>
2022-06-29 11:12:59 +02:00
DL6ER 3634ba254e Remove check for CAP_IPC_LOCK as we are not using mlock() anywhere in the code
Signed-off-by: DL6ER <dl6er@dl6er.de>
2022-01-02 15:00:10 +01:00
DL6ER 646e709fb1 Do not warn about missing capabilities during startup. The embedded dnsmasq does the same but config-aware, i.e. it will not complain about missing CAP_NET_ADMIN when DHCP is not used. As its warnings are now much more present in all logs, we don't need to do the check twice. The existing checks remain there but are only used in debug mode (DEBUG_CAPS).
Signed-off-by: DL6ER <dl6er@dl6er.de>
2022-01-02 15:00:02 +01:00
DL6ER a5af39f33c Check E(ffective) in addition of P(ermitted) capabilities flag. E is what the kernel actually checks, P is a limiting superset for the capabilities that could be added to the E and I(nheritable) sets. We need both as TCP workers will be forks.
Signed-off-by: DL6ER <dl6er@dl6er.de>
2022-01-02 14:57:09 +01:00
DL6ER c0570c51c2 Merge branch 'development' into new/http
Signed-off-by: DL6ER <dl6er@dl6er.de>
2021-11-02 09:53:13 +01:00
DL6ER ac0346b9e2 Improvements based on static-analysis of source code
Signed-off-by: DL6ER <dl6er@dl6er.de>
2021-09-23 20:24:57 +02:00
DL6ER 4fa2a78769 Also check for capabilities CAP_IPC_LOCK and CAP_CHOWN
Signed-off-by: DL6ER <dl6er@dl6er.de>
2021-09-06 23:34:52 +02:00
DL6ER 9080ab805f Simplify linux capability check output
Signed-off-by: DL6ER <dl6er@dl6er.de>
2021-08-10 15:43:41 +02:00
DL6ER 55bf825a81 Implement TOML config file reader/writer and a converter of the pre-v6.0 config file format.
Signed-off-by: DL6ER <dl6er@dl6er.de>
2021-06-10 12:11:25 +02:00
DL6ER 36fbc43f87 Include which debug option leads to a DEBUG output and skip logging if this debug option is not enabled
Signed-off-by: DL6ER <dl6er@dl6er.de>
2021-05-27 11:13:25 +02:00
DL6ER 9d926e12d1 Use specific log routines in capabilities.c
Signed-off-by: DL6ER <dl6er@dl6er.de>
2021-05-27 10:22:31 +02:00
DL6ER 7459d8235b Rename memory.c -> syscalls.c
Signed-off-by: DL6ER <dl6er@dl6er.de>
2020-12-09 20:21:03 +01:00
DL6ER c6b9f1d0d3 Set nice value of pihole-FTL (configurable) to increase DNS server performance.
Signed-off-by: DL6ER <dl6er@dl6er.de>
2020-05-28 20:38:00 +02:00
DL6ER e365364f72 Move all source files into new subdirectory "src". Put compiled objects into new subdirectory "build".
Signed-off-by: DL6ER <dl6er@dl6er.de>
2019-07-02 00:18:56 +02:00