Welcome! Log In Create A New Profile

Advanced

how to enable non root user to execute nginx reload

October 19, 2020 07:24AM
A non root process needs to signal reload to nginx master (as root) without sudo

I've tried using setcap and setpriv with CAP_KILL, both not work.


# getcap nginx/sbin/nginx
nginx/sbin/nginx = cap_kill+ip
#su user01 -s /bin/sh -c 'nginx/sbin/nginx -s reload'
nginx: [alert] kill(68, 1) failed (1: Operation not permitted)


#setpriv --inh-caps +cap_5 --ambient-caps +cap_5 su user001 -s /bin/sh -c 'nginx/sbin/nginx -s reload'
nginx: [alert] kill(68, 1) failed (1: Operation not permitted)


I don't konw if this is specifc to nginx only or I mis used the linux capability?
looking foward for the help


BR,
Allen
Subject Author Posted

how to enable non root user to execute nginx reload

allenhe October 19, 2020 07:24AM

Re: how to enable non root user to execute nginx reload

Igor A. Ippolitov October 19, 2020 10:12AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 193
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready