Welcome! Log In Create A New Profile

Advanced

CAP_NET_ADMIN

October 12, 2016 06:04AM
Hi All,

I am stuck trying to get my nginx service which is launched via
SystemD to give CAP_NET_ADMIN to its workers (required for
IP_TRANSPARENT).

I have tried /etc/security/capability.conf & setcap. SystemD has the
permission whitelisted:

CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_NET_ADMIN
CAP_SYS_RESOURCE CAP_SETGID CAP_SETUID
AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_NET_ADMIN
CAP_SYS_RESOURCE CAP_SETGID CAP_SETUID

Any advice?

Regards,
Mathew

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

CAP_NET_ADMIN

splitice October 12, 2016 06:04AM

Fwd: CAP_NET_ADMIN

splitice October 12, 2016 06:10AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 83
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready