projects / platform / core / security / nether.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e0cd09a) | patch
Set capabilities for nether process and binary. 75/79675/3
authorZbigniew Jasinski <z.jasinski@samsung.com>
Tue, 12 Jul 2016 09:07:25 +0000 (11:07 +0200)
committerZbigniew Jasinski <z.jasinski@samsung.com>
Thu, 14 Jul 2016 09:35:58 +0000 (11:35 +0200)
commit4e54c7d912639bf9b2388058407f7d6894370e04
tree9b3ee693dc33d05535192e765c08321319fed3b5tree | snapshot
parente0cd09a60209f5873a19001305967b416b467e1ccommit | diff
Set capabilities for nether process and binary.

Nether running as non-privileged user needs CAP_NET_ADMIN for netfilter
to work. Additionally it needs CAP_NET_RAW to restore firewall with
iptables.

Change-Id: Ieb358e8837769ffe2039c608be2361e2feec8a1c
Signed-off-by: Zbigniew Jasinski <z.jasinski@samsung.com>
conf/systemd/nether.service.in diff | blob | history
packaging/nether.spec diff | blob | history
Domain: Security / Access Control;