A non root process needs to signal reload to nginx master (as root) without sudo
I've tried using setcap and setpriv with CAP_KILL, both not work.
# getcap nginx/sbin/nginx
nginx/sbin/nginx = cap_kill+ip
#su user01 -s /bin/sh -c 'nginx/sbin/nginx -s reload'
nginx: [alert] kill(68, 1) failed (1: Operation not permitted)
#setpriv --inh-caps +cap_5 --ambient-caps +cap_5 su user001 -s /bin/sh -c 'nginx/sbin/nginx -s reload'
nginx: [alert] kill(68, 1) failed (1: Operation not permitted)
I don't konw if this is specifc to nginx only or I mis used the linux capability?
looking foward for the help
BR,
Allen