FS#41285 - [sslh] Enable capabilities support

Attached to Project: Community Packages
Opened by Kirill Churin (reflexing) - Monday, 21 July 2014, 08:47 GMT
Last edited by Sébastien Luttringer (seblu) - Tuesday, 19 August 2014, 12:02 GMT
Task Type Feature Request
Category Packages
Status Closed
Assigned To Sébastien Luttringer (seblu)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Please enable capabilities support for transparent proxying.

See Capabilities support part on https://github.com/yrutschle/sslh
This task depends upon

Closed by  Sébastien Luttringer (seblu)
Tuesday, 19 August 2014, 12:02 GMT
Reason for closing:  Implemented
Additional comments about closing:  1.16-2
Comment by Sébastien Luttringer (seblu) - Tuesday, 22 July 2014, 23:35 GMT
I'm quoting the Capabilities support part:

Caveat: CAP_NET_ADMIN does give sslh too many rights, e.g. configuring the interface. If you're not going to use transparent proxying, just don't use it (or use the libcap method).
Comment by Kirill Churin (reflexing) - Wednesday, 23 July 2014, 02:10 GMT
@seblu yep, I should've been more specific. Can you compile sslh with USELIBCAP=1? That will eliminate caveat you mentioned ;)

Loading...