torproject/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-12-06 19:41:15 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Add ability to keep the CAP_NET_BIND_SERVICE capability on Linux

Browse Source 
This feature allows us to bind low ports when starting as root and
switching UIDs.

Based on code by David Goulet.

Implement feature 8195
This commit is contained in:
Nick Mathewson
2015-11-06 13:12:44 -05:00
parent af80d472f7
commit e8cc839e41
7 changed files with 175 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
changes/feature8195
+6
View File
@@ -0,0 +1,6 @@
o Major features:
- When Tor is started as root on Linux and told to switch user ID, it
can now retain the capabilitity to bind to low ports. By default,
Tor will do this only when it's switching user ID and some low
ports have been configured. You can change this behavior with
the new option KeepCapabilities. Closes ticket 8195.